Securing Cookies with HttpOnly and secure Flags [Updated 2020]
Dawid Czagan
Dawid Czagan (@dawidczagan) has found security vulnerabilities in Google, Yahoo, Mozilla, Microsoft, Twitter, BlackBerry and other companies. Due to the severity of many bugs, he received numerous awards for his findings.
Dawid is founder and CEO at Silesia Security Lab, which delivers specialized security auditing services with a results-driven approach. He also works as Security Architect at Future Processing.
Dawid shares his bug hunting experience in his workshop entitled “Hacking web applications – case studies of award-winning bugs in Google, Yahoo, Mozilla and more”. To find out about the latest in Dawid’s work, you are invited to visit his blog (https://silesiasecuritylab.com/blog) and follow him on Twitter (@dawidczagan).
Non-Repudiation and Digital Signature [Updated 2018]
Quantitative Risk Analysis
Tunneling, Crypto and VPNs
Bypassing Packet Filters with IP Fragmentation Overlapping
HTTPS and Mixed Content Vulnerability
Cookies with Secure Flag: Undesired Behavior in Modern Browsers
Effective Risk Reduction
Qualitative Risk Analysis with the DREAD Model
Cookies with HttpOnly Flag: Problem in Some Browsers