Timeline for Remember me feature: do we need a server side token if the cookie is signed by the server?
Current License: CC BY-SA 4.0
20 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 17, 2022 at 7:07 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Jan 22, 2022 at 18:00 | history | tweeted | twitter.com/StackSecurity/status/1484948979133685761 | ||
| Jan 17, 2022 at 6:03 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Sep 19, 2021 at 5:04 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| May 22, 2021 at 5:00 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Jan 22, 2021 at 4:05 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Dec 23, 2020 at 3:24 | answer | added | Conor Mancone | timeline score: 1 | |
| Dec 23, 2020 at 3:04 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Aug 25, 2020 at 2:02 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Apr 27, 2020 at 1:02 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Dec 29, 2019 at 1:02 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Aug 31, 2019 at 1:00 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| May 3, 2019 at 0:02 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Apr 3, 2019 at 4:43 | comment | added | Waiting for Dev... | You can avoid it by storing in the server the expiration time, so you can expire it manually if needed. Of course, then you are very close to the server token scenario, but with a little less burden. | |
| Apr 2, 2019 at 23:32 | answer | added | John Wu | timeline score: -1 | |
| Apr 2, 2019 at 16:50 | comment | added | Waiting for Dev... | Good point, that's true. But if it is not a concern, you get a simpler solution (less actors involved) with the signed cookie. | |
| Apr 2, 2019 at 16:45 | comment | added | Steve | Consider the scenario where you want to revoke a specific session. In some cases you don't want to affect everyone. | |
| Apr 2, 2019 at 16:42 | history | edited | Waiting for Dev... | CC BY-SA 4.0 |
Fix error talking about encrypting instead of singing
|
| Apr 2, 2019 at 15:30 | review | First posts | |||
| Apr 2, 2019 at 22:26 | |||||
| Apr 2, 2019 at 15:25 | history | asked | Waiting for Dev... | CC BY-SA 4.0 |