This set of slides explains why you need the persistent authentication cookie generator and the implementation overview

1. Persistent Cookie Authentication Gem by: Wong Liang Zan liangzan.net

2. What are Persistent Cookies?

5. It’s your browser cookies

7. It is used to identify you

9. Who are using it?

10. Why do I need it?

11. Skip the registration step

13. Less steps

14. Jakob Nielsen says “Less steps = Better usability”

15. It increases the conversion rate

16. Conversion Rate Carts / Orders = %

17. Top 10 retailers by conversion rate (Aug ’08)‏ 15.2% eBay 10 17.3% Office Depot 9 17.7% The Sportsman Guide 8 18.8% Roamans 7 19.7% LL Bean 6 19.7% LaneBryant Catalog 5 20.1% QVC 4 20.1% Blair.com 3 20.8% 1800flowers.com 2 41.5% ProFlowers 1

18. Average e-commerce store’s conversion rate? 0.5 – 2 %

19. Persistent Cookies removes the registration step Gets the user to the checkout page faster Increases the conversion rate

20. So, what does the gem has?

22. How do I install it?

23. gem install persistent_cookie_authentication_generator Documentation http://liangzan.net/?p=34

24. Implementation Overview Credit to: Barry Jaspan & Charles Miller

25. When a user logs in, a cookie is issued

26. The cookie has

27. When the user visits the site… 3 courses of action

29. Diagram of new cookie

30. 2) Username & series are present, token doesn’t match A theft has occurred.

31. 3) Username & series not present Ignore

32. How do you know someone has stolen my cookie?

33. When a hacker logs in with your cookie... His token is replaced. But yours is still the old one

34. How do we know it's you? Ans: Your series is still the same

35. When there exist a cookie with the same username, series, but not the same token... It means that someone used your cookie to log in before you.

37. Q & A