RE: [WEB SECURITY] IP address change: relogin

["Martin O'Neal" <martin.oneal@xxxxxxxxxxxx>]

> Make it simple...force users to enter 
> passwords PLUS implement verifications 
> of unique tokens generated with every 
> request (encrypted tokens), whenever 
> users (authenticated or otherwise) 
> make a HTTP request that may reveal 
> any sensitive information etc. 

Sounds interesting; what unique tokens are these?

Martin...

----------------------------------------------------------------------------
Join us on IRC: irc.freenode.net #webappsec

Have a question? Search The Web Security Mailing List Archives:
http://www.webappsec.org/lists/websecurity/archive/

Subscribe via RSS:
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]

Join WASC on LinkedIn
http://www.linkedin.com/e/gis/83336/4B20E4374DBA