Tag Info

New answers tagged

2

In this question regarding Google's cookies and the HTTPonly flag: [Google] store the important stuff (for example, HSID, NID and SSID) as HTTPonly Additionally, the SSIDcookie is marked with the Secure flag. This means that it won't be sent by the browser over a plain HTTP connection. So to answer your question, if your Session ID allows access to ...


1

If the cookie is meant to be kept private such as a session cookie, definitely not. Google may think that they don't need to specify that the cookie is sent over a secure connection because they already default to https for all secure aspects of the site. The most likely reason is probably because Google is set to be automatically redirected to https by the ...


1

HTTP is stateless, and in order to have an authenticated state, you need some kind of token used to reference information about the user. This session id is usually in the form of a random token sent as a cookie value. An OAuth Access Token is used to identify a user, and the scope of resources that user has access to. In applications that use OAuth ...



Top 50 recent answers are included