SecurityInnovation/TMContentReview — Issue #211: Session IDs Are Protected
Author: SergeTruth
Created: 2011-11-07 23:29:48+00:00
State: open

Need to mention the requirement for HttpOnly as well.