Re: Basic login security/session management question

2008-10-27 Thread walden
Andrey! I don't get why you're putting an exclamation point after my name. Are you shouting at me? I can't explain why you need cookies. I don't use them. I didn't write the FAQ either. Walden On Oct 26, 10:17 am, Andrey [EMAIL PROTECTED] wrote: walden! I also don't get why we need

Re: Basic login security/session management question

2008-10-27 Thread Reinier Zwitserloot
inline responses... On Oct 1, 4:22 am, nogridbag [EMAIL PROTECTED] wrote: 1) If we can't trust cookies, what's the point of using cookies at all? As a storage space to save the session ID between sessions. Users do sometimes close their web browsers, or at least the tab with your page on it.

Re: Basic login security/session management question

2008-10-26 Thread Andrey
walden! I also don't get why we need cookies. Can you please answer to this question? Why don't we store session id in JS variable? On 1 окт, 15:44, walden [EMAIL PROTECTED] wrote: Hi nogridbag, You might just want to begin at the beginning and read the HTTP Basic and HTTP Digest

Re: Basic login security/session management question

2008-10-26 Thread Ian Bambury
You don't need cookies. The FAQ actually tells you not to rely on cookie data Store the session ID somewhere as a GWT field and send it with the rest of your data Ian http://examples.roughian.com 2008/10/26 Andrey [EMAIL PROTECTED] walden! I also don't get why we need cookies. Can you

Basic login security/session management question

2008-10-01 Thread nogridbag
Hi, I'm fairly new to web apps so I have a few basic questions about handling the user's secure session. I read the article on login security here: http://code.google.com/p/google-web-toolkit-incubator/wiki/LoginSecurityFAQ I understand everything up to the section How to remember logins. At