Reusing Session ID

Posted by lockedscope on Stack Overflow See other posts from Stack Overflow or by lockedscope
Published on 2010-03-23T10:29:26Z Indexed on 2010/03/23 10:33 UTC
Read the original article Hit count: 191

Filed under:
|
|

I am confused with the following sentence(with bold) from Microsoft about Session IDs. It seems to say the obvious, if we reuse a valid Session ID then we do not need to create a new Session ID. Am i missing something? What is reusing in this context? Using the Session ID as an identifier in database or etc is reusing or what?


Therefore, you can reuse session IDs for several reasons. For example, if you reuse session IDs, you do not have to do the following:

Create a new cryptographically unique session ID when you are presented with a valid session ID.

http://support.microsoft.com/?kbid=899918

© Stack Overflow or respective owner

Related posts about ASP.NET

Related posts about session