2022 Developer Survey is open! Take survey.

New answers tagged

2 votes
Accepted

Session cookie security

The cookie is sent in the header, so it is visible for eaves droppers. It is not visible for eavesdroppers on the network if the connection is encrypted, i.e. HTTPS is used. With HTTPS not only the ...
user avatar

Top 50 recent answers are included