Re: Is it OK to require per-session cookies?

Thomas Hurst <tom.hurst@clara.net> writes:

> Hence, how Amazon always asks for a password before you do anything.  IP
> tracking and restrictive login timeouts should take care of forms.

IP tracking over proxies with multiple output IPs?

Restrictive login timeouts? How short should they be then? 10 seconds?

Received on Monday, 26 November 2001 15:48:31 UTC