Gmail Login Gets CSRF Protection

Google has silently implemented cross-site request forgery protection for Gmail authentication. The new feature comes in the form of a unique token stored in a browser cookie and checked when the login request is submitted.Cross-site request forgery (CSRF) attacks involve tricking a... [ read more >> ]