Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yes, the focus is on preventing cookie forgery for pre-auth account compromise or privilege escalation.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: