1
vote
How to properly migrate authentication cookies to using a new encryption scheme on a website while being backwards compatible?
Broadly, the approach makes sense. You should delete (set to expire in the past) any "old_cookie" you receive at the same time you set the new one to move users over as quickly as possible ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
encryption × 5829cryptography × 845
tls × 543
aes × 427
passwords × 414
authentication × 321
hash × 308
key-management × 234
file-encryption × 233
disk-encryption × 226
decryption × 208
rsa × 201
web-application × 194
public-key-infrastructure × 183
privacy × 170
network × 167
databases × 166
pgp × 158
email × 156
certificates × 148
android × 138
password-management × 132
asymmetric × 128
openssl × 124
linux × 123