From: Sean O'Halpin <sean.ohalpin@...>
Date: 2006-06-22T11:26:57+09:00
Subject: Re: IE cookie/session problem

On 6/21/06, Mark Van Holstyn <mvette13@gmail.com> wrote:
> We ran into an odd problem today regarding IE and cookies/sessions. We have
> one site running at the url 'dev.test.com ' and another running at
> 'it.dev.test.com
> '. Both of these site are using the exact same codebase, on the same server.
> Both work just fine in Firefox. 'dev.test.com ' works fine in IE,
> however 'it.dev.test.com'
> does not. Using ethereal, I noticed that IE was not sending the _session_id
> cookie back when using the url ' it.dev.test.com ' though it does when using
> the url 'dev.test.com'. Has anyone ever run into IE having problems with
> cookies/session using a url like this?
>
Yes. I seem to remember that this happened to us when we applied SP2.
This problem usually crops up when you have an underscore in the
domain name. This is wild guessing on my part (because I can't find
any definitive explanation) but I think IE thinks you're sending a
malformed url and doesn't send the cookie as a security feature (on
the other hand, it could just be a bug...). It's possible that IE (or
the programmer who added this 'fix') also objects to domain names of
more than three components.

Regards,
Sean