Not if you set the Domain attribute of the cookie properly, this is a poor softw... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Avamander on Jan 10, 2020 \| parent \| context \| favorite \| on: Benchmarking DNS response times of TLDs Not if you set the Domain attribute of the cookie properly, this is a poor software problem, not second-level domain problem.

johannes1234321 on Jan 10, 2020 [–]

True, but simple mitigations can be powerful ...

Sidenote: If leaking cookies to your own subdomains is a risk, one might also have other problems already. Point is: I explained the potential risk. Evaluating one has to do oneself

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact