Cookies on the net: Do not underestimate security risks when surfing!

Cookies on the net: Do not underestimate security risks when surfing!

Cham, Deutschland - On January 9, 2025, the District Cham on various aspects of cookie use on its website. Accordingly, certain cookies are necessary for the function of the website and cannot be deactivated. These cookies are usually placed in response to user actions, for example when specifying data protection settings, registration or filling out forms. It is pointed out that users can configure their browser in such a way that they block cookies or receive notifications about them. However, this can affect the functionality of certain areas of the website. The cookies used do not save any personal data.

The ** cookie details ** include the following information:

• name: asp.net_sessionidid

  duration: until the browser session

  Art: 1st party

  category: necessary

  Description: session cookie for platforms created with Microsoft .NET technologies; serves to maintain an anonymized user session by the server.

• name: __Requestverification token

  duration: until the browser session

  Art: 1st party

  category: necessary

  Description: is set as soon as a registration form is displayed on the page; No content is written yet.

• name: LD cookieselection

  duration: 30 days

  Art: 1st party

  category: necessary

  Description: stores the setting of the cookie selection.

Safety fuses in cookies

In addition, it was pointed out to the use of cookies in connection with the use of cookies, as explained in an article on Stack Overflow . A new susceptibility to security concerns the establishment of connections via HTTP, which are then redirected to HTTPS. In such cases, the sessionid cookie is marked as safe, although the first request is made via HTTP. According to McAfee Secure, this represents a significant security risk.

The code provided to secure cookies ensures that they are only protected on connections via HTTPS. If the connection is unsure, the sessionid cookie is expired by emptied its value and set the cookie on January 1, 2018, which also leads. The code also checks whether cookies are available and marks the Forms authentication cookie and the session cookie as safe if the connection is safe.

-transmitted by West-Ost-Medien