ConceptSigned Session Cookie
Signed Session Cookie
A lightweight mechanism for identifying clients in systems without accounts. The server issues a cookie containing a random identifier with an HMAC signature to prevent forgery, and it is used for rate limiting and session tracking.
Timeline (last 90 days)
Oct 18
In a system without user accounts, a signed session cookie is issued by the server with a random identifier and an HMAC signature to prevent forgery or tampering of the identifier, thereby identifying the client and binding rate-limit counters.
Unverified50%