Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I'm sure I'll get flack for this but isn't a session cookie passed with every request essentially the same as passing an Auth header with every request? In either case HTTP is still stateless.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: