Security implications of Firefox 2.0 session restore feature

by Khürt on October 28, 2006 · View Comments

in How To

The restore ses­sion fea­ture of Fire­fox is very nice to have.  Fire­fox 2.0 will attempt to restore a ses­sion con­nec­tion if the browser dies.  How­ever this has secu­rity impli­ca­tions espe­cially for bank­ing or any ser­vice with a login.  See below for Mozilla Foun­da­tion notes:

The Ses­sion Restore func­tion­al­ity pro­vided in Fire­fox 2 will restore con­nec­tions to ser­vices which use ses­sion cook­ies to main­tain login state such as GMail. It is rec­om­mended that users with con­cerns about the pri­vacy impli­ca­tions of this behav­ior change the value of browser.sessionstore.resume_from_crash to false.

If you enjoyed this post, please con­sider leav­ing a com­ment or sub­scrib­ing to the RSS feed to have future arti­cles deliv­ered to your feed reader.
GAuthor: Khürt
I'm a husband, a father to two very smart kids, an information security manager and a web developer. I'm a Mac geek who loves photography, hefe-weisse ale and Ethiopian coffee. I'm @khurtwilliams on twitter.
blog comments powered by Disqus

Previous post:

Next post: