Re: Paper: Weaning the Web off of Session Cookies

2010-01-31 Thread Adam Barth
On Sun, Jan 31, 2010 at 4:50 PM, Chris Hills wrote: > On 31/01/2010 18:12, Timothy D. Morgan wrote: >> That's handy, but doesn't that mean the website you're accessing will >> still use cookies once you're authenticated? > > Yes it does :/ But I think it's easier to get sites to implement OpenID >

Re: Paper: Weaning the Web off of Session Cookies

2010-01-31 Thread Chris Hills
On 31/01/2010 18:12, Timothy D. Morgan wrote: > That's handy, but doesn't that mean the website you're accessing will > still use cookies once you're authenticated? Yes it does :/ But I think it's easier to get sites to implement OpenID then it is to support HTTP Auth with certificates. Do you thi

Re: Paper: Weaning the Web off of Session Cookies

2010-01-31 Thread Timothy D. Morgan
> This is why I try to use OpenID where possible, since my provider > supports certificate login, which removes the necessity from the web > site to support it (as long as it supports OpenID of course). That's handy, but doesn't that mean the website you're accessing will still use cookies once yo