search

yesodweb / clientsession

Stores web session data in a client cookie, protected with authentication and encryption.
MIT License
24 stars 14 forks source link

Use HMAC-SHA256. #1

Closed meteficha closed 13 years ago

meteficha commented 13 years ago

Please review it. Passes all tests. =)

meteficha commented 13 years ago

Note that this patch obviously break the format of the cookies. I don't know to which version we should bump the package. It may also be a good idea to delete your client_session_key.aes to get 64 random bytes there, or even change the defaultKeyFile to something else.