lundi 7 mars 2016

Session handling on web apps

I've been reading about sessions, both client and server side as well as few attacks possible on them. I'd like to know what are the practical solutions to the following problems related to sessions

  • Race condition between two request trying to change the session variables
  • When session ids are regenerated, what happens to the slow requests that reach the server with older session id



Aucun commentaire:

Enregistrer un commentaire