Matt Silverlock

There is not a Java library for this. What use-case requires you to issue cookies in Go but decode in Java?

Moving to an AEAD construct is on the list (as well as simplifying the API), but I don't have the bandwidth for it. I'd accept a minimal PR that exposes...

Agree. This is something I’d like to refactor—and simplify—under my v2 rewrite. Error handling in Go is never straightforward and I don’t think the current approach in securecookie is ideal....

> @elithrar could use your advice here Needs positive & negative tests - for the mentioned issue and the delated code.

> @chaudyg that could be true for the HTML website server. > > > > But for REST Api based servers, this is not very intuitive as per my understanding...

@amustaque97 - great! The best thing you can do is actively contribute - both repositories have a number of open issues that need review, as well as PRs that need...

To re-state - the best way to contribute is to jump in! I don't have the time to actively assign or triage issues. Folks interested in getting involved and getting...

@weex I specifically want to keep the barrier to entry low here: otherwise we risk finding no one at all. The most likely maintainer is someone who is already engaged...

@alexellis I mention _websocket_ in the opening post ;-)

@wubin1989 > To re-state - the best way to contribute is to jump in! > I don't have the time to actively assign or triage issues. Folks interested in getting...