Hacker News new | ask | show | jobs
by NateLawson 6006 days ago
Yes, the focus is on preventing cookie forgery for pre-auth account compromise or privilege escalation.