Timeline for Session cookie secure flag: best practice
Current License: CC BY-SA 3.0
24 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 11, 2017 at 19:34 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Nov 11, 2017 at 19:13 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Oct 12, 2017 at 13:50 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Sep 12, 2017 at 13:30 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Aug 13, 2017 at 11:20 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Jul 14, 2017 at 10:39 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Jun 14, 2017 at 9:50 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| May 15, 2017 at 9:49 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Apr 15, 2017 at 9:22 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Mar 16, 2017 at 8:54 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Feb 14, 2017 at 6:56 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Jan 15, 2017 at 4:06 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| S Dec 16, 2016 at 3:40 | history | edited | techraf | CC BY-SA 3.0 |
Corrected spelling
|
| S Dec 16, 2016 at 3:40 | history | suggested | eightShirt | CC BY-SA 3.0 |
Corrected spelling
|
| Dec 16, 2016 at 3:35 | review | Suggested edits | |||
| S Dec 16, 2016 at 3:40 | |||||
| Nov 20, 2016 at 11:37 | answer | added | Sjoerd | timeline score: 3 | |
| Nov 15, 2016 at 16:47 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Oct 16, 2016 at 16:06 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Sep 16, 2016 at 18:28 | history | tweeted | twitter.com/StackSecurity/status/776850310472097794 | ||
| Sep 16, 2016 at 16:00 | comment | added | Sravan | Its the other way around. The browsers are not ignoring the secure flag | |
| Sep 16, 2016 at 15:58 | answer | added | Sravan | timeline score: 3 | |
| Sep 16, 2016 at 13:08 | comment | added | Pleymor |
If you do that and you send an http request, the response will contain a set-cookie JSESSIONID with the secure flag, but your browser won't create the cookie, so it won't work actually.
|
|
| Sep 16, 2016 at 12:58 | comment | added | Sravan | What if you use 1 but the httpd is not configured for TLS? | |
| Sep 16, 2016 at 11:38 | history | asked | Pleymor | CC BY-SA 3.0 |