WebApp Sec mailing list archives

Re: Session Management and IP address - experiences?


From: Frank Knobbe <frank () knobbe us>
Date: Thu, 02 Sep 2004 22:53:16 -0500

On Thu, 2004-09-02 at 13:17, Jeremiah Grossman wrote:
For myself, I'm a proponent of ip-binding sessions when appropriate. It 
makes the wall just a little bit higher.

What do you consider appropriate?

Regards,
Frank



Attachment: signature.asc
Description: This is a digitally signed message part


Current thread: