New answers tagged session-management
2
votes
Accepted
Session cookie security
The cookie is sent in the header, so it is visible for eaves droppers.
It is not visible for eavesdroppers on the network if the connection is encrypted, i.e. HTTPS is used. With HTTPS not only the ...
Top 50 recent answers are included
Related Tags
session-management × 551cookies × 158
authentication × 113
web-application × 103
php × 64
tls × 43
session-fixation × 40
csrf × 31
web-browser × 25
jwt × 23
appsec × 19
encryption × 18
http × 18
xss × 14
token × 13
passwords × 12
oauth × 12
javascript × 11
account-security × 10
authorization × 10
man-in-the-middle × 9
rest × 9
hash × 8
mobile × 8
asp.net × 7