It was suggested on the shib-users mailing list that we should change
cookie expiration policies from "expires at end of session" to "expires
at time XYZ". At least browsers will honor a time-based expiration, for
now!

Thanks for sharing this. Sounds like something we should investigate. Created issue to track:

https://issues.jasig.org/browse/CAS-1324

M

--
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to