At 05:43 PM 4/14/2008, Graham Leggett wrote:
If you revert this, you break mod_session_crypto, which in turn severely limits the usefulness of mod_session_cookie, which in turns limits the usefulness of mod_auth_form, which is turn limits the usefulness of httpd's powerful AAA mechanism that has been sadly limited to Basic and Digest auth only for the last ten years.
Is there some reason that this code can't be put directly in mod_session_crypto?
