Good to hear, Phil. Thanks. And Yep, Dale, I agree with your second point. FWIW, I’d said to Phil initially:
“In fact, you may want to try not setting the jsessionid cookie at all. I had a client doing that, and he stopped it, and his problem went away (I proposed he might have resolved it with the new attribute above but he realized he really didn’t need to be setting it at all.)” BTW, Phil (and anyone else trying to deal with these sort of things), when it comes to trying to solve this sort of problem, there are a couple of challenges: - One is that issue of existing cookies perhaps causing confusion - Another is that when you make changes to the this scope in your application.cfc, you MUST cause a reload of the application to get those changes to “take”, whether you restart CF, or call onapplicationstart(), or use CF9’s new applicationstop function (the next request reloads the app.) HTH. /charlie From: cfaussie@googlegroups.com [mailto:cfaussie@googlegroups.com] On Behalf Of Dale Fraser Sent: Monday, April 07, 2014 10:50 PM To: cfaussie@googlegroups.com Subject: RE: [cfaussie] CF10 Cross Domain sessions with HTTPS I suspect you could clear all cookies, ditch the onsession start code and it will still work. Regards Dale Fraser From: cfaussie@googlegroups.com [mailto:cfaussie@googlegroups.com] On Behalf Of Phil Rasmussen Sent: Tuesday, 8 April 2014 12:48 PM To: cfaussie@googlegroups.com Subject: Re: [cfaussie] CF10 Cross Domain sessions with HTTPS Thanks Charlie Okay sorry if I didn't clarify further but I will post the final elements of my Application.cfc below: <snip> -- You received this message because you are subscribed to the Google Groups "cfaussie" group. To unsubscribe from this group and stop receiving emails from it, send an email to cfaussie+unsubscr...@googlegroups.com. To post to this group, send email to cfaussie@googlegroups.com. Visit this group at http://groups.google.com/group/cfaussie. For more options, visit https://groups.google.com/d/optout.
