Comment on Scaling Play to Thousands of Concurrent RequestsparentComments−gnaritas13yAs long as you encrypt it, sure you can. It's no different than storing the session pointer in the cookie.−oceanstone13yThough, with every HTTP request, the client will be uploading the entire cookie. This could manifest as degraded responsiveness, especially for mobile devices.−gnaritas13yThat's the trade you make when using cookies. Nothing new there.−ExpiredLink13yEncrypted cookies? Just what hackers have been waiting for.
Comments
As long as you encrypt it, sure you can. It's no different than storing the session pointer in the cookie.
Though, with every HTTP request, the client will be uploading the entire cookie. This could manifest as degraded responsiveness, especially for mobile devices.
That's the trade you make when using cookies. Nothing new there.
Encrypted cookies? Just what hackers have been waiting for.