SSL and HttpServletRequest.getRequestedSessionId()

[Walker, Eric]

When accessing a web site configured for SSL I have noticed that calling HttpServletRequest.getRequestedSessionId() for a client that has not yet joined a session returns a non null value. The same scenario for a non-SSL site always returns a null. Any ideas why there is a difference between SSL vs. non-SSL?   Thanks Eric