RFC: Secure Session Module Options/Internal by Default
Project Governance
Author
Yasuo Ohgaki
HTTP session management is core of Web security. Current default of session module options are weaker than it could be. Secure values by default would be better...