View Full Version : A question about the subdomains security

30 May 2008, 00:37

I want to give my moderators sub-domains in the site, to publish there blogs via blogspot.com.

The question is: Is there any possibility for the cookies to be stolen from the main domain? How can I protect myself and my users?


30 May 2008, 06:51
If you can't trust whoever you're about to give a sub domain to not steal cookies, you may want to reconsider the idea.

But the subdomains won't really be an issue, its whatever they chose to upload to these subdomains that may cause the problem.

30 May 2008, 13:37
I'm not going to give them a host space.

Their sub-domains will be CNAMEs for their blogspot accounts.

So they'll use the blogger service but with sub-domains with my site.

So the only issue is the possibility of stealing the cookies which I'm asking about.

Any help would be appreciated.

30 May 2008, 17:35
Nope they won't be able to steal cookies then