From: matz@... (Yukihiro Matsumoto)
Date: 2003-05-31T00:30:50+09:00
Subject: Re: [Q]: CGI::Session

Hi,

In message "[Q]: CGI::Session"
    on 03/05/29, Tom Danielsen <tom@mnemonic.no> writes:

|- why is only the first part of the MD5 sum used in
|  the session_id ?

Not to make file names too long (Perl's CGI session does this too).  I
believe it is secure enough.

|- why does CGI::Session::FileStore write the session
|  variables as text, instead of using Marshal ?

Allow users to choose their own stringify method.

							matz.