[cap-talk] Security considerations for cookies

[Raoul Duke]

On Tue, Feb 23, 2010 at 12:59 PM, Toby Murray
<toby.murray at comlab.ox.ac.uk> wrote:
> Absolutely. I was thinking of the petname tool as well when I wrote
> that. I would like to think that there is a way to do better than
> petnames, or a method that doesn't place the same burden of the user
> to do something out of the ordinary in order to be secure when they're
> being attacked.

hear hear!