zacoppotamus / ElgarsCodingOrchestra

2nd Year Software Engineering Project
project.spe.sneeza.me
3 stars 0 forks source link

Consider hashing the cookie? #91

Closed zacoppotamus closed 10 years ago

BenElgar commented 10 years ago

It won't work. We need the API key that's stored in the cookie to send requests, so any hashing method would have to be symmetrical and work in Javascript (for the upload form) so it really won't be any more secure. The only way I can think of making it more secure is to proxy all the calls to the API and have a secure login with a session cookie.