[cap-talk] Security considerations for cookies

[Raoul Duke]

On Mon, Feb 22, 2010 at 9:39 PM, Sandro Magi <naasking at higherlogics.com> wrote:
> It should be exceedingly
> unlikely that the attacker could know and pick the same one. The user
> will immediately see that he is not in his inbox.

personally, i can't say i buy that claim w/out extensive research
behind it. users are just too crazy and varied! :-)