Limit sessions to countries #42

Open
opened 2022-05-10 15:54:29 +00:00 by MCWertGaming · 0 comments
MCWertGaming commented 2022-05-10 15:54:29 +00:00 (Migrated from github.com)

It would be good if we limit a session to the country it was created in using geoip. This would make session theft harder, because the actor must know from where the stolen session comes from and then trick our geoip verification/

It would be good if we limit a session to the country it was created in using geoip. This would make session theft harder, because the actor must know from where the stolen session comes from and then trick our geoip verification/
Commenting is not possible because the repository is archived.
No description provided.