Planing a browser plugin. Worried about cookie security.

eapro

In Runtime
Messages
317
I'm not a programmer but, I have an idea for a browser plugin. IE and FF. I don't want to reveal what it is.

I'm worried about security though. This plugin will use some kind of cookie technology. But if the cookie is taken, it would compromise the users big time.

So what I want to know is. Is the cookie safe from interception? For example, could someone trick the browser to give the cookie to the wrong website and therefore steal the cookie?

If the cookie is stolen then resubmitted, it would be very bad.
 
Sounds like you're going about designing your security wrong.

How do you plan on implementing it? How will it be used in your plugin? If you can give us a diagram or chart maybe me or someone else can help you. You don't have to reveal your plugin to us but some knowledge of how stuff works could help.

On your issue about interception. Anything can be intercepted. Spoofing is possible also. It's unlikely though. But security through obscurity is never a good thing.
 
Back
Top Bottom