Hacker News new | ask | show | jobs
by dude_abides 5539 days ago
Just wondering: Why doesn't a webserver encrypt the cookie value with a server-side key? This way, the information in the cookie (timestamps, pageviews, number of sessions etc.) can be safe from wireshark sniffers.
1 comments
calloc 5539 days ago
That would have to be done on Google's end, that is not something webmasters using Google Analytics are able to do by themselves.
link
dude_abides 5539 days ago
Yep. I'm wondering why Google, in this case, wouldn't encrypt the value stored in its cookie. Is there any technical reason other than laziness?
link
calloc 5539 days ago
I believe the cookies are set and manipulated by JavaScript, as such I'm not even sure it would be a good idea...
link