Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Web Application Security
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Whitepaper "SESSION RIDING - A Widespread Vulnerability in Today's Web Applications" Dec 22 2004 08:30PM
Eran Tromer (webapp2eran tromer org)
On 12/22/2004 10:12 PM, Eran Tromer wrote:
> On 12/22/2004 07:47 PM, Florian Weimer wrote:
>> The HMAC input should also cover a time-dependent value sent along in the
>> clear (which is later used to check the token for freshness). A form
>> identifier could also be helpful.
>
> [snip]
> The tim...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus