Hacker News new | ask | show | jobs
by curtain 1692 days ago
I think you hand them over regardless, the logout is to render them invalid.

I wonder how many sites neglect that part.