When the server and client maintain the same sessionId and I expose the method thru Restful JSon format,
in case some body sniffs the internet and get my packet of json, now that person can gain access to the data
of my service because he has the sessionId. Just wondering is it the best practice to encrypt the sessionId
in anyways? but anyways, can that person use the encrypted token and impersonate the identity of the
original user and talk to the server and steal some sensitive information?
Thanks
Jack
Go to the complete details ...