Slashdot Mirror
How Not To Design a Protocol
An anonymous reader writes "Google security researcher Michael Zalewski posted a cautionary tale for software engineers: amusing historical overview of all the security problems with HTTP cookies, including an impressive collection of issues we won't be able to fix. Pretty amazing that modern web commerce uses a mechanism so hacky that does not even have a proper specification."
... cookies are delicious!
Check out my novel.
> HTTP is like a manual lawn mower.
No it isn't. A manual lawnmower is well-designed. The Web is like a lawnmower built by Rube Goldberg out of dozens of pairs of scissors, lots of string, some boards and a child's wagon, propelled by a large dog and powered by the wagging of his tail (the cookies are to get him to wag it). It's now had a clippings bag and a fertilizer cart added following the same design principles. An automatic dandilion remover, a dethatcher, and an aerator are coming soon (and several more dogs).
Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
You forgot to mention that the dog taking a shit is an extra add-on........Flash!
am I the only one who now wants to see that built/build it myself?
i thought once I was found, but it was only a dream.
...which smells so bad because the dog has been fed the worst dogfood, called PHP
A session is forever
i love your design
It would appear that you do not know what a manual lawnmower is.
Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
Thank you, Captain Hindsight! What a complete failure the designers of HTTP were. They should've done it so much different! :-)