[thesite] My Intro and a look at a UEUE Proposal

[Garrett Coakley]

On Tue, 16 Oct 2001 15:23:37 -0700, ".jeff" <jeff at members.evolt.org>
wrote:


> the cookie expiration can be fairly far off.  however, the expiration
> for the key should be somewhat short (like 1-2 weeks).  that doesn't 
> mean it needs to fail though.  we can store the last key used.  if 
> the user's cookie doesn't respond to the current key, but it responds
> to the last key issued *and* it's last modified date is within the 
> period of activity for the last key then we could reissue the cookie 
> with the newly encrypted data using the current key.

Damn!... thats elegant.

+1

G.

-- 
----------------------------------------------------------------------------
WORK: http://spiked.co.uk/
PLAY: http://polytechnic.co.uk/