elixir-secure-coding icon indicating copy to clipboard operation
elixir-secure-coding copied to clipboard

Add Signed & Encrypted Cookies to Cookie Security module

Open houllette opened this issue 1 year ago • 0 comments

In the effort of completeness, we should include definitions around signed cookies and encrypted cookies to the module.

Relevant Resources:

  • https://cloud.google.com/cdn/docs/using-signed-cookies#:~:text=Signed%20cookies%20give%20time%2Dlimited,t%20feasible%20in%20your%20application.
  • https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-signed-cookies.html
  • https://blog.jscrambler.com/securing-http-cookies#:~:text=Encrypted%20Cookies&text=This%20adds%20a%20layer%20of,can't%20sniff%20the%20cookies.
  • https://security.stackexchange.com/questions/67401/what-is-actually-the-purpose-of-encrypting-the-values-in-a-cookie

houllette avatar Sep 01 '22 18:09 houllette