I'm designing a page intended to reside on a .onion domain and in the TOR design guide located here
http://wf4df37hrebhwzts.onion
I read this:
"If you're designing dynamic web sites(versus this one which is just an html document) then try to avoid using cookies to store session data. Instead, pass the session name into output of your page, so that as the user browses your site, it's passed along from page to page. While this is often considered bad from a security point of view outside of ToR, on ToR its the best option available."
I'm having some trouble grasping this concept for some reason... That is to say, how do I pass session data into the output of the page? Does anyone here know how I'm supposed to manage this?
Any ideas would be greatly appreciated.
Thank you,
/Tox
http://wf4df37hrebhwzts.onion
I read this:
"If you're designing dynamic web sites(versus this one which is just an html document) then try to avoid using cookies to store session data. Instead, pass the session name into output of your page, so that as the user browses your site, it's passed along from page to page. While this is often considered bad from a security point of view outside of ToR, on ToR its the best option available."
I'm having some trouble grasping this concept for some reason... That is to say, how do I pass session data into the output of the page? Does anyone here know how I'm supposed to manage this?
Any ideas would be greatly appreciated.
Thank you,
/Tox
