#dev 2018-02-19

2018-02-19 UTC

snarfed yup. no scopes in session cookies. although the thread model is getting weak fast here, so keep paying attention to your tradeoffs in time and effort vs protecting some hypothetical threat