Comment 1 for bug 118599

Revision history for this message
Robert Collins (lifeless) wrote : Re: Session tokens should cycle

Tying to IP would likely frustrate users. Rotating the session key say daily would be good.