Cookies For Free (Hardened Stateless Session Cookies)

[jzabroski]

@davidfowl This might be out of scope for BedrockFramework, but given you have a basic framework for putting together communication protocols, it would be kind of nice in the spirit of "Theorems For Free" lambda calculus papers to consider a way to serialize authentication and permissions in a session without any special transport layer knowledge. Hence, I call this "Cookies For Free".

The idea would be that you could mix in a cookie exchange as part of the communication stack, and you could guarantee certain properties of that communication via the properties of the Cookie itself. There's no special functions; it's just data. The idea comes from Murdoch's paper "Hardened Stateless Session Cookies".