http://qs1969.pair.com?node_id=472526


in reply to Re: Eliminate server-side state to obviate cookies
in thread "omniscient debugging" for Perl

How do you stop the client from changing the state into one it shouldn't?
It's easy: cryptographically sign the state.