I had the privilege of attending the Internet Identity Workshop (2009) at the Computer History Museum in Mountain View, CA at the beginning of November. I conducted a session called "Identity and Cloud Computing" at IIW. The session notes are...

There are concerns that client side scripts should not be able to access the cookies sent by the server. Toward this, the HTTPOnly cookie was invented by Microsoft Internet Explorer and has been reasonably adopted by other browsers and the...