Re: [php-gtk-webmaster] cvs: php-gtk-web / admin-logout.php

Once again, signed cookies have nothing to do with SSL. They rely on  
hash algos like MD5 and SHA-1.

-Andrei


On Jul 9, 2006, at 2:37 PM, Steph Fox wrote:

> Yeah I know about SSL. I just don't know if it's appropriate for this.
>
>>> Whatever... it still needs to be a different cookie.
>> Fine, so let's do that.
>>> What do you mean by 'signed'? do we have a secure server setup?
>> Signed cookies prevent tampering. You can read a bit about it here:
>> http://www.hccfl.edu/pollock/Docs/PubKeyCrypto/
>> -Andrei
>> __________ NOD32 1.1380 (20060125) Information __________
>> This message was checked by NOD32 antivirus system.
>> http://www.eset.com
>>