Securely encrypt data stored in cookies
Problem
Keep prying eyes away from your application cookie data
If your web site or web application uses cookies to store data, the chances are that you've had questions about the security of the data within the cookie.
There are three main problems with storing data in cookies.
- The cookie of the computer that hosts the client web browser can be opened and read by the user. This could be a problem if there is sensitive information and the user reading the contents of the cookie shouldn't really have access to the information.
- When using an unsecured (i.e. non HTTPS) connection, data contained in cookies can be intercepted by unscrupulous web proxies operating between the web server and client browser. Again, there could be a potential security issue with unknown users reading sensitive data contained in cookies.
- The recipient can maliciously alter the contents of the cookie for example, to try and hack a web site by “spoofing” a logon of another user.
Solution
Our product solves these problems by securely encrypting data in cookies before sending to client web browsers. If a user were to open up the cookie, they would see only encrypted information which cannot be understood. Furthermore, any attempt to alter the contents of the cookie can be detected and appropriate action taken.