Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Essentially all applications that use cookies for authentication need to protect against CSRF.

Not just cookies!! Any HTTP authentication. Kerberos, NTLM, OAuth.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: