WebApp Sec: ColdFusion - CFID & CFTOKEN

[Jason binger <cisspstudy () yahoo com>]

I am currently doing some work with CF MX 6.1 and was
wondering if anyone had some information on the
strength of the CF cookie implementation.

How random the token generation is? How is the
generation performed?
What is the range of the generated tokens? 
Has an independent security analysis been performed
and commented on in a public paper?

I have not seen any vendor supplied information on
this.

Cheers,
Jason


                
__________________________________ 
Do you Yahoo!? 
Yahoo! Small Business - Try our new resources site!
http://smallbusiness.yahoo.com/resources/