On Mon, Jul 9, 2012 at 7:41 PM, proper <torbox at riseup.net> wrote: > HS + SSL makes sense: I was under the impression that browsers had generally stronger cookie and cross domain policies for SSL sessions but maybe I'm imagining things.