Mcafee PCI Compliance failing on Session ID cookie?

Posted by frio80 on Stack Overflow See other posts from Stack Overflow or by frio80
Published on 2010-04-22T20:55:22Z Indexed on 2010/04/24 2:13 UTC
Read the original article Hit count: 285

Filed under:

pci-dss

|

drupal

|

cookies

Hello there. I am attempting to obtain PCI compliance for my site but the Mcafee security scan has thrown a:

Potential Sensitive Persistent Cookie Sent Over a Non-Encrypted (SSL) Channel

Drupal (default behavior) sets a session cookie when you simply arrive at the site. This is causing the problem. Clearly, the entire site shouldn't be under SSL; plenty of other sites set session cookies like this.

What gives?

© Stack Overflow or respective owner

Related posts about pci-dss

Options for PCI-DSS 11.5 - Deploy file integrity monitoring software

as seen on Server Fault - Search for 'Server Fault'
I'm looking for options to be compliant with PCI-DSS section 11.5 for some servers I manage at the datacenter. There are several servers (less than 20) and they are mostly CentOS5, but there are some RHEL4 and Solaris9 Sparc. I believe Tripwire, Inc. is the leader in this area, but I am looking for… >>> More
Wireless Activity Monitoring for PCI DSS Compliance

as seen on Super User - Search for 'Super User'
In an effort to be PCI DSS compliant, I took a trustkeeper.net questionnaire. I failed the question that asks Is the presence of wireless access points tested for by using a wireless analyzer at least quarterly or by deploying a wireless IDS/IPS to identify all wireless devices in use? (SAQ #11… >>> More
Oracle for PCI-DSS Security Webcast

as seen on Oracle Blogs - Search for 'Oracle Blogs'
Thanks to everyone who attended the Oracle for PCI-DSS security webcast today. It was good to see how the products we talked about last week can be used to address the PCI standard requirements. A big thanks to Chris Pickett for presenting a great session and running us through a very cool demo showing… >>> More
Secure Delete PCI-DSS Windows Environment

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello, I have been reviewing a number of applications for securing deleting files. I understand the concepts of overwriting the file several times with zeros and random characters; however, I don't understand the concept of renaming the file up to thirty times before actually deleting the file. Any… >>> More
PCI/DSS: Data at Rest

as seen on Stack Overflow - Search for 'Stack Overflow'
Would you consider the use of caching products in the category of data at rest? >>> More

Related posts about drupal

Commercial Drupal Modules & Themes

as seen on Just Skins - Search for 'Just Skins'
A discussion at Drupal.org forums prompted me to give my input about commercial ecosystem around Open Source Content Management Systems. WordPress and Joomla have been growing rapidly since past few years. But, growth rate of Drupal seems to be almost flat. Despite being the most powerful CMS around… >>> More
better to wait Drupal 7 to start learning Drupal, or no big difference with Drupal 6?

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi friends, I'm going to start some projects in next weeks. I currently have my custom cms, but i wanna go for opensource cms solution from now on. and as i researched Drupal is COOL for any kind of project from small scope to most complex ones. I have never used Drupal before, I know nothing about… >>> More
Drupal 6: Drupal Themer gives same candidate name for different type of content types

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi friends, I'm a drupal newbie... I have different type of contents like News, Events, etc. and their content is different. News detail page has title-content text-date. but Events detail page has title-date-content text-location-speaker-etc. So I need different layout page for these different… >>> More
drupal: how to generate doc files in drupal is there any possibility to that

as seen on Stack Overflow - Search for 'Stack Overflow'
how to generate doc file in drupal files.. do we have module for that... as pdf generation module... >>> More
Drupal 6 vs Drupal 7 performance

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi all. I want to start new project and stuck without idea what version to use. I have huge expirience with D6, and also one project (module developement) for D7. It looks like D7 slower, have bigger memory consumption and also have a lack of documentation by the moment. I don't need new CCK, Views… >>> More