» 赖洪礼的 blog » Rails 2.0, cookie session store and security
Really clear explanation of session store issues related to security and rails.