This is a static demo page. You will notice that a section below has base64 encoded text. This is encrypted using RC4 with a secret that can be decrypted with a secret key (se below). The idea is that in future AD platforms can be made to support this feature to deliver the secret key (as cookie) while delivering the AD. Since all these elaborate systems are not available, this is just a proof of concept, poor man's demo!
To simulate secret key delivery, copy paste this to your address bar:
javascript:document.cookie = "kab_secret=DEADFACE123123123123123400000000; path=/";You have to hit back button and refresh the page. Once you do this, the cookie is set forever and the page is decoded automatically. To unset cookie, type:
javascript:document.cookie = "kab_secret=; path=/";
In future, the idea is to cooperate with AD providers or some such system, so that the cookie is sent by them and you should be able to use their AD platform to configure the secret cookie itself.