[cgiapp] Perl CGI authentication and session management

["David Christensen" <suppressed>]

suppressed:

Thilo Planz wrote:
> Everything you send or receive via https is encryted.
> This even includes the HTTP headers, which is why name-based virtual
> hosting does not work with https.

Thanks for your reply. :-)

Okay.


> Depending on how paranoid you are you can also set the "secure
> connection" flag on the cookie, so the cookie will only be send via
> encrypted connections.

Does this work using http?  (A given session may go back and forth
between http and https.)


David


---------------------------------------------------------------------
Web Archive:  http://www.mail-archive.com/suppressed/
              http://marc.theaimsgroup.com/?l=cgiapp&r=1&w=2
To unsubscribe, e-mail: suppressed
For additional commands, e-mail: suppressed