This will help reduce session hijacking vulnerabilities since the session id cannot be sniffed and easily hijacked 這樣會(huì)話id不會(huì)被探嗅到而且不容易被截獲,就可以減少會(huì)話截獲的危險(xiǎn)。
To exploit this vulnerability seems even easier than session hijacking , as the attacker stays in the middle acting as an ap access point to the real user , and as a user to the actual ap 利用這一弱點(diǎn)甚至好象比會(huì)話劫持更容易,因?yàn)楣粽咛幱趯?shí)際用戶(hù)和實(shí)際ap (接入點(diǎn))之間,它對(duì)于實(shí)際用戶(hù)冒充ap ,對(duì)于實(shí)際ap則冒充用戶(hù)。
In computer science, session hijacking is the exploitation of a valid computer session?sometimes also called a session key?to gain unauthorized access to information or services in a computer system. In particular, it is used to refer to the theft of a magic cookie used to authenticate a user to a remote server.