I'm almost positive that those two cookies are unexpiring, because they're used for more than just session management. The session timeout is performed on the server - after period X, the cookies are accepted, but not considered to be part of the session any more. If you le J2EE sessions in the CF admin, then you'll use a jsessionid cookie, which is a memory-only cookie.
cheers, barneyb On 9/12/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Hi, > > I'm trying to clarify the expiration time for the Cookie.CFID and > Cookie.CFTOKEN cookies created when a new session starts. Is it the length > of the time that is specified in the sessionmanagement attribute of the > cfapplication tag? If so, is this documented anywhere? > > I did find some documentation (on livedocs) on how to make the cookies > automatically expire when the browser is closed, but I need to know what is > actually happening when those cookies are created by CF and I need some > documentation to back it up if at all possible. > > Thanks, > > Dave -- Barney Boisvert [EMAIL PROTECTED] 360.319.6145 http://www.barneyb.com/ Got Gmail? I have 100 invites. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Find out how CFTicket can increase your company's customer support efficiency by 100% http://www.houseoffusion.com/banners/view.cfm?bannerid=49 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:217963 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

