Why using cookie to store session info is a better idea than just using session info in the request ?

Interview Questions and Answers

Q1. Why using cookie to store session info is a better idea than just using session info in the request ?

Ans. Session info in the request can be intercepted and hence a vulnerability. Cookie can be read and write by respective domain only and make sure that right session information is being passed by the client.

Help us improve. Please let us know the company, where you were asked this question :

_{Like Discuss Correct / Improve j2ee servlets session session management web applications cookies httpsession architecture}

Related Questions

What is session tracking and how do you track a user session in servlets?

what is the use of cookie and session ? and What is the difference between them ?

What are different types of cookies ?

Please specify in what sequence the objects of following classes will be created ?

Session , SessionFactory, Query , Configuration

What is a cookie ?

What is the use of HTTPSession in relation to http protocol ?

http protocol is by default ... ?

How many SessionFactory and Session objects are created ?

What does the following exception means

org.hibernate.LazyInitializationException: could not initialize proxy - no Session

Search Interview Questions

Help us and Others Improve. Please let us know the questions asked in any of your previous interview.