Re: Problem with cookie in IE

Hassan Schroeder
2009-10-03T03:25:43Z

On Fri, Oct 2, 2009 at 1:02 AM, Peter De Berdt
<peter.de.berdt-LPO8gxj9N8aZIoH1IeqzKA@public.gmane.org> wrote:

> However, cookieless sessions (where the session id is passed on through
> parameters is

one view: "generally a bad idea and poses a very big security risk
  (users can post a url with the session part included)."

another view: an accepted practice on other platforms aware that
  mandating the use of cookies for full functionality may be culturally
  inappropriate or outright illegal. And if there''s anything sensitive
--
  financial, health, personal privacy -- involved in your app, then you
  should be using SSL anyway, which negates the above concern. :-)

FWIW,
--
Hassan Schroeder ------------------------
hassan.schroeder-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org
twitter: @hassan