Web authentication state – Session vs Cookie?
The problem with favoring sessions over cookies for ‘security’ is that sessions USE cookies to identify the user, so any issue with cookies is present with sessions. One thing to keep in mind with the use of Sessions is data locality. If you plan to scale to more than one webserver at any point, you … Read more