Re: Security Question: Tabs sharing session information, etc...

2009-07-02 Thread EricLaw
On May 16, 6:21 pm, Boris Zbarsky bzbar...@mit.edu wrote: There's also the fact that users don't see separate tabs as separate sessions...  With windows it's more interesting; in particular for WinIE separate windows are in fact separate sessions if they're started by clicking the icon. FWIW,

Re: Security Question: Tabs sharing session information, etc...

2009-05-17 Thread Bil Corry
Boris Zbarsky wrote on 5/16/2009 8:21 PM: Why haven't browsers (such as FireFox) isolated tabs/windows from each other such that I cannot simply replicate a logged-in user by simply pasting into another FF tab? For what it's worth, some sites do in fact prevent this (not sure which

Security Question: Tabs sharing session information, etc...

2009-05-16 Thread Rafal Los
Can anyone answer this question: What is the *technical reason* that separate TABS cannot be isolated from each other (for session management, etc). I ask this specifically because it's great that great strides are being made by the browser makers to keep the tabs/windows isolated from

Re: Security Question: Tabs sharing session information, etc...

2009-05-16 Thread Boris Zbarsky
Rafal Los wrote: Can anyone answer this question: What is the *technical reason* that separate TABS cannot be isolated from each other (for session management, etc). Because the session information is per-profile in the typical case (e.g. cookies). If the question is why session cookies