New answers tagged session-management
2
votes
Accepted
Session cookie security
The cookie is sent in the header, so it is visible for eaves droppers.
It is not visible for eavesdroppers on the network if the connection is encrypted, i.e. HTTPS is used. With HTTPS not only the ...
- 181k
Top 50 recent answers are included