On 18 June 2015 at 00:54, Thomas Heller <i...@zilence.net> wrote:
>
>
> On Wed, Jun 17, 2015 at 9:50 PM, James Reeves <ja...@booleanknot.com>
> wrote:
>
>> On 17 June 2015 at 09:51, Thomas Heller <th.hel...@gmail.com> wrote:
>>>
>>> On another note: Sessions in cookies should be VERY VERY small.
>>> java.io.Serializable usually isn't small and especially if you go java
>>> object -> binary -> base64 -> base64 (yes twice) -> encrypt. The size of
>>> the cookie matters as it is transmitted with EVERY request.
>>>
>>
>> The cookie is only transmitted when the session changes. However, several
>> browsers place limits on the size of stored cookies, and so it's generally
>> not a good idea to serialize anything large into a cookie.
>>
>
> They are transmitted for every request client -> server. If you host
> images/css/js on the same host each request will contain the cookie. 2kb
> cookie for 100 requests (quite common for webapps) and all the
> optimizations done to keep javascript small go out the window.
>

Ah yes, sorry; I misread your original message as "response" instead of
"request".

- James

-- 
You received this message because you are subscribed to the Google
Groups "Clojure" group.
To post to this group, send email to clojure@googlegroups.com
Note that posts from new members are moderated - please be patient with your 
first post.
To unsubscribe from this group, send email to
clojure+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/clojure?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"Clojure" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to clojure+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to