Hacker News Reader

>>I am almost obsessing over web security ..

If you need more security why not use https all the time and better use two factor authentication?

BTW, would you mind explaining what is a client side session? Share a link may be? Really, I have never heard of them-

By client side session, I mean that the session related data will be stored on client side (in a cookie) instead of server side (database, files etc.).

Generally speaking when it comes to any client-server communications, nothing stored on the client can be trusted to be unaltered out of band from your application logic.

There are very few situations in which I'd store anything on the client other than a basic session id representing server-side state.

Reply on news.ycombinator.com