Client Side HTTP Cookie Security Attack and Defense

HTTP cookies are an important part of trust on the web. Users often trade their login credentials for a cookie, which is then used to authenticate subsequent requests. Cookies are valuable to attackers: passwords can be fortified by two-factor authentication and \"New login location detected\" emails, but session cookies typically bypass these measures.