From: Thomas Hurst <tom.hurst@...>
Date: 2002-10-15T21:03:13+09:00
Subject: Re: CGI sessions without cookies?

* Stefan Scholl (stefan.scholl@brave.de) wrote:

> Thomas Hurst <tom.hurst@clara.net> wrote:
> > No, cookies live for the browser session by default.
>
> Perhaps you should learn about cookies before we continue the
> discussion.

Netscape's specification[1]:

  expires is an optional attribute. If not specified, the cookie will
  expire when the user's session ends.


RFC 2109, "HTTP State Management Mechanism"[2]:

   Max-Age=delta-seconds
      Optional.  The Max-Age attribute defines the lifetime of the
      cookie, in seconds.  The delta-seconds value is a decimal non-
      negative integer.  After delta-seconds seconds elapse, the client
      should discard the cookie.  A value of zero means the cookie
      should be discarded immediately.

..

   The user agent applies these defaults for optional attributes that
   are missing:

   Max-AgeThe default behavior is to discard the cookie when the user
          agent exits.


References:
  1: http://www.netscape.com/newsref/std/cookie_spec.html
  2: http://www.ietf.org/rfc/rfc2109.txt

-- 
Thomas 'Freaky' Hurst  -  freaky@aagh.net  -  http://www.aagh.net/
-
Fine day to throw a party.  Throw him as far as you can.