Re: QUESTION: How to use *only* cookies for session tracking?

2008-02-09 Thread David Brown
Hello, you might want to take a look at: http://www.coreservlets.com/ The marquee author hosting the above named site wrote a book with the same title: * According to the author (Marty Hall) the only downside(s) to cookies are privacy issues. * The client browser has to have cookies turned on

Re: QUESTION: How to use *only* cookies for session tracking?

2008-02-09 Thread Leon Rosenberg
Lets face it, there is virtually no site of interest that doesn't require cookies (or javascript). A possibility to turn url rewriting off would be really great even it isn't covered by the servlet spec. And we all know how disturbing url rewriting is for crawlers. But since tomcat isn't a ref

Re: QUESTION: How to use *only* cookies for session tracking?

2008-02-09 Thread Len Popp
There's an article here: http://randomcoder.com/articles/jsessionid-considered-harmful that describes how to disable URL rewriting using a filter. -- Len On Feb 8, 2008 10:30 PM, Gregory Gerard [EMAIL PROTECTED] wrote: http://tomcat.apache.org/tomcat-5.5-doc/config/context.html I can turn

QUESTION: How to use *only* cookies for session tracking?

2008-02-08 Thread Gregory Gerard
http://tomcat.apache.org/tomcat-5.5-doc/config/context.html I can turn cookies on or off but I don't see a similar setting for URL rewriting. I've already made my peace with requiring cookies for other reasons. Possible? Downsides? I'm seeing a lot of double fetching of content (JavaScript