Comment by buchodi

There are specific details about how the mechanism works like the cookie name (__obi) that can help defenders.