Forum OpenACS Development: Re: Cookie handling and IE

4: Re: Cookie handling and IE (response to 1)
Posted by Tom Jackson on

Should we embed the port number as well? Since in http, port number is part of the 'virtual' host? It seems we can't rely on browsers figuring this one out on their own.

Number three is definitely the way to go.

6: Re: Cookie handling and IE (response to 4)
Posted by Jeff Davis on
Tom, keep in mind that the string you tack on to the cookie does not mean anything, it's just a text string tacked on
to disambiguate the cookies for hosts that share a domain.
We probably want whatever it is we advertise to the outside world as our "real" url (param SystemURL I guess) but it
could just as easily be some constant hashed together with the server secret (which would then just work automatically for clusters with no risk of collisions).