Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Heimdall 58fa80bc5b Make the attempt cookie's deletion Secure so a browser honours it ... A __Host- cookie is only removed by a Set-Cookie that is itself Secure. The hardening test now checks Secure on every header, deletion included, and the completion tests pin that success and refusal both clear the attempt cookie with Secure, Path=/ and no Domain. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>		2026-11-09 11:24:02 +00:00
..
Bifrost.Web	Make the attempt cookie's deletion Secure so a browser honours it	2026-11-09 11:24:02 +00:00