Discovered security gap: This is how your browser protects your data!

Discovered security gap: This is how your browser protects your data!

Cham, Deutschland - On January 10, 2025, the district of Cham announced that the health certificate is now available online. This is an important development for citizens who want to get to this document quickly and easily. According to the district's information, necessary cookies are required for the function of the website and cannot be deactivated.

These cookies are usually placed in response to user actions, such as when specifying data protection settings, registration or filling out forms. However, users have the option of setting their browser so that they block cookies or receive notifications about them. However, it is pointed out that this can affect the functionality of certain areas of the website. It is important to mention that these cookies do not save any personal data.

Details about the cookies

The individual cookies that are set while using the website are:

• name: asp.net_sessionidid

  duration: until the browser session

  Art: 1st party

  category: necessary

  Description: session cookie for platforms created with Microsoft .NET technologies; serves to maintain an anonymized user session by the server.

• name: __Requestverification token

  duration: until the browser session

  Art: 1st party

  category: necessary

  Description: is set as soon as a registration form is displayed; No content is written yet.

• name: LD cookieselection

  duration: 30 days

  Art: 1st party

  category: necessary

  Description: stores the setting of the cookie selection.

In addition, security duly recent times have been discussed in relation to the safety of cookies. A new susceptibility to security was discovered, the appearance when users request via HTTP and then redirect to HTTPS. In these cases, the sessionid cookie is set as safe (secure), but only when the first request via http. McAfee Secure has classified this situation as a susceptibility to security.

When providing safe code, care is taken to ensure that cookies are only secured if the request is made via HTTPS. Without a safe protocol, the sessionid cookie is set as expired, which increases the safety of the user data.

Further information on these topics are at Landkreis-Cham.de and stackoverflow.com

-transmitted by West-Ost-Medien