Home/ Questions/Q 39855
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-10T14:55:50+00:00

I got a little curious after reading this /. article over hijacking HTTPS cookies.

  • 0

I got a little curious after reading this /. article over hijacking HTTPS cookies. I tracked it down a bit, and a good resource I stumbled across lists a few ways to secure cookies here. Must I use adsutil, or will setting requireSSL in the httpCookies section of web.config cover session cookies in addition to all others (covered here)? Is there anything else I should be considering to harden sessions further?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. https://www.isecpartners.com/media/12009/web-session-management.pdf

    A 19 page white paper on ‘Secure Session Management with Cookies for Web Applications’

    They cover lots of security issues that I haven’t seen all in one spot before. It’s worth a read.

    • 0