[hunchentoot-devel] Sessions not secure?

[Edi Weitz]

On Sun, 23 Dec 2007 22:22:22 +0000 (UTC), Sohail Somani <sohail at taggedtype.net> wrote:

> Hypothetically speaking, if I wanted to prevent hijacking by
> guessing, I could just redefine hunchentoot:get-next-session-id.
>
> Does this sound correct?

Yes, I think so.

> Btw, great set of libraries. I don't know how you do it. My theory
> is that you are really three people.

Four... :)