1 vote

How to properly migrate authentication cookies to using a new encryption scheme on a website while being backwards compatible?

Broadly, the approach makes sense. You should delete (set to expire in the past) any "old_cookie" you receive at the same time you set the new one to move users over as quickly as possible ...
CBHacking's user avatar
  • 45.3k

Only top scored, non community-wiki answers of a minimum length are eligible