Is Storing a Recoverable Password in a Browser Cookie a Security Risk?
During an authorized security assessment of a government website, I noticed that the "Remember Me" login feature appeared to save a recoverable password in a client-side browser cookie.…