On May 16, 6:21 pm, Boris Zbarsky <[email protected]> wrote: > There's also the fact that users don't see separate tabs as separate > sessions... With windows it's more interesting; in particular for WinIE > separate windows are in fact separate sessions if they're started by > clicking the icon.
FWIW, this is no longer true as of IE8. http://blogs.msdn.com/ie/archive/2009/05/06/session-cookies-sessionstorage-and-ie8.aspx _______________________________________________ dev-security mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security
