diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2021-02-15 04:02:10 -0500 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2021-02-15 04:02:10 -0500 |
| commit | 2688ca04a500551fb562520a2cbef1b039cadd81 (patch) | |
| tree | 7a783f10d0f99fe3d90476479d25efffabfcd483 /static | |
| parent | ba302d9f8650208db8660d2bdec75ea22ffaf7fd (diff) | |
clarify lack of persistent state for web sites
Diffstat (limited to 'static')
| -rw-r--r-- | static/features.html | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/static/features.html b/static/features.html index ea181abf..e70fd384 100644 --- a/static/features.html +++ b/static/features.html @@ -198,9 +198,10 @@ when sending mail including alert messages from the attestation service</li> <li>SSHFP across all domains for pinning SSH keys</li> <li>Static key pinning for our services in apps like Auditor</li> - <li>No cookies or similar client-side state for anything other than login sessions, - which are set up via SameSite=strict cookies and have server-side session tracking - with the ability to log out of other sessions</li> + <li>No persistent cookies or similar client-side state for anything other than + login sessions, which are set up via SameSite=strict cookies and have + server-side session tracking with the ability to log out of other + sessions</li> <li>scrypt-based password hashing (likely Argon2 when the available implementations are more mature)</li> </ul> |