Linking

The Checksum

• The make_link and caf_link APIs give us an URL like:

/caf/Admin/account?rm=edit&acct_id=72&_checksum=f9053f95a3c...

• The checksum:
• long string of hex digits
• cryptographic hash of params and secret per-site string
• prevents users from tampering with URL params