Watch this video on YouTube
Fill in the blank: To assess a web application's security against session hijacking, one should test the strength of its __________.