arrg!!!! a) If you are having problems with ASP Sessions being maintained, then this is being caused because you have illegal characters in the name of your server. IE 6 no longer returns session cookies to servers will illegal DNS characters (even though they may be legal NetBIOS characters, eg _ )
See the "note" on this page: http://support.microsoft.com/default.aspx?scid=kb;en-us;319182 b) If you are having problems with "normal" cookies, then I suspect it's because you don't have an appropriate compact privacy policy. Create one, and deploy it on your site. Compact Privacy policies are a w3 standard (or maybe still in the recommendation stage). Plenty of information in MSDN library, here is a starting point: http://msdn.microsoft.com/library/?url=/Workshop/security/privacy/overview/c reateprivacypolicy.asp?frame=true [To Damian Elder] Maybe you should do some research before moaning about "Nope good old MS drops the ball again". All I can assume from your post is that you'd rather blame Microsoft for problems rather than find the underlying problem. Is something stops working, it's "Microsoft's" fault - never your own. If you're having a legitimate problem, you'd have posted your configuration - what cookies you're using, what circumstances they're not being returned etc. Cheers Ken ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ From: "Jamal Saleh" <[EMAIL PROTECTED]> To: "IIS50 Discussions" <[EMAIL PROTECTED]> Sent: Tuesday, December 17, 2002 4:22 AM Subject: RE: the great cookie debate... : We have been having this problem with one of our web app that uses session : variables. It kinda cought me off guard. : : Jamal : : -----Original Message----- : From: Damian Elder [mailto:[EMAIL PROTECTED]] : Sent: Monday, December 16, 2002 10:44 AM : To: IIS50 Discussions : Subject: RE: the great cookie debate... : : : Refer them to there own IT staff : : -----Original Message----- : From: [EMAIL PROTECTED] : [mailto:[EMAIL PROTECTED]] On Behalf Of Steve Flook : Sent: 16 December 2002 15:27 : To: IIS50 Discussions : Subject: RE: the great cookie debate... : : : Well at least I feel a little better that I'm not alone here. It has just : become a burden on us, taking calls about loss of functionality, etc and : right away I'm like "Ok, go to 'Help' on the file menu, and then 'About : Internet Explorer', does it say version 6.0?... ah I see". : : Then I have to go through the whole mess of the end user saying "But it says : 'privacy' tab, what are you having me do?". : : Steve : : -----Original Message----- : From: Mark Eckeard [mailto:[EMAIL PROTECTED]] : Sent: Monday, December 16, 2002 10:25 AM : To: IIS50 Discussions : Subject: RE: the great cookie debate... : : : I have. : : Thought it was strange as a default setting. : : Mark : --- Robert Swiger <[EMAIL PROTECTED]> wrote: : > I haven't had any problems with session cookies : > being set on IE 6 with : > 'Block all cookies' set. Has anyone else? : > : > Rob Swiger : > Webmaster : > TCRHonline - Where People Care : > : > Twin County Regional Healthcare : > 200 Hospital Drive : > Galax, Virginia 24333 : > (276) 238-3515 PHONE : > (276) 236-2660 FAX : > http://www.tcrh.org : > [EMAIL PROTECTED] : > : > GO HOKIES!!! : > : > -----Original Message----- : > From: Steve Flook [mailto:[EMAIL PROTECTED]] : > Sent: Monday, December 16, 2002 10:11 AM : > To: IIS50 Discussions : > Subject: the great cookie debate... : > : > Is it me or has some of the default IE 6+ installs : > and patches set end : > user's cookie settings to "Block all Cookies"? I : > can understand perhaps : > blocking persistent cookies by default (i.e. ones : > that are permanently : > written to the local disk), but we are having an : > increased number of support : > calls because some of our dynamic web apps are using : > session cookies which : > in turn are being blocked. : > : > I am unaware of any security concerns with session : > cookies to help some web : > applications maintain a session state. Just : > wondering if I'm alone here or : > not. : > : > Thanks- : > Steve : > : > : > --- : > You are currently subscribed to iis50 as: : > [EMAIL PROTECTED] : > To unsubscribe send a blank email to %%email.unsub%% : > : > --------- : > Administrated by 15 Seconds : : > http://www.15Seconds.com : > List Archives/Search : : > http://local.15Seconds.com/search : > Subscription Information : http://www.15seconds.com/listserv.htm : > Advertising Information: : > http://www.internet.com/mediakit/ : > : > Confidentiality Notice: This email message, : > including any attachments, is : > for the sole use of the intended recipient(s) and : > may contain confidential : > and privileged information. Any unauthorized : > review, use, disclosure or : > distribution is prohibited. If you are not the : > intended recipient, please : > contact the sender by reply email and destroy all : > copies of the original : > message. : > : > --- : > You are currently subscribed to iis50 as: [EMAIL PROTECTED] To : > unsubscribe send a blank email to %%email.unsub%% : > : > --------- : > Administrated by 15 Seconds : : > http://www.15Seconds.com : > List Archives/Search : : > http://local.15Seconds.com/search : > Subscription Information : http://www.15seconds.com/listserv.htm : > Advertising Information: : > http://www.internet.com/mediakit/ : > : > : : : __________________________________________________ : Do you Yahoo!? : Yahoo! Mail Plus - Powerful. Affordable. Sign up now. : http://mailplus.yahoo.com : : --- : You are currently subscribed to iis50 as: [EMAIL PROTECTED] : To unsubscribe send a blank email to %%email.unsub%% : : --------- : Administrated by 15 Seconds : http://www.15Seconds.com : List Archives/Search : http://local.15Seconds.com/search Subscription : Information : http://www.15seconds.com/listserv.htm : Advertising Information: http://www.internet.com/mediakit/ : : : --- : You are currently subscribed to iis50 as: [EMAIL PROTECTED] To : unsubscribe send a blank email to %%email.unsub%% : : --------- : Administrated by 15 Seconds : http://www.15Seconds.com : List Archives/Search : http://local.15Seconds.com/search Subscription : Information : http://www.15seconds.com/listserv.htm : Advertising Information: http://www.internet.com/mediakit/ : : : : --- : You are currently subscribed to iis50 as: [EMAIL PROTECTED] To : unsubscribe send a blank email to %%email.unsub%% : : --------- : Administrated by 15 Seconds : http://www.15Seconds.com : List Archives/Search : http://local.15Seconds.com/search Subscription : Information : http://www.15seconds.com/listserv.htm : Advertising Information: http://www.internet.com/mediakit/ : : : --- : You are currently subscribed to iis50 as: [EMAIL PROTECTED] : To unsubscribe send a blank email to %%email.unsub%% : : --------- : Administrated by 15 Seconds : http://www.15Seconds.com : List Archives/Search : http://local.15Seconds.com/search : Subscription Information : http://www.15seconds.com/listserv.htm : Advertising Information: http://www.internet.com/mediakit/ : --- You are currently subscribed to iis50 as: [email protected] To unsubscribe send a blank email to [EMAIL PROTECTED] --------- Administrated by 15 Seconds : http://www.15Seconds.com List Archives/Search : http://local.15Seconds.com/search Subscription Information : http://www.15seconds.com/listserv.htm Advertising Information: http://www.internet.com/mediakit/
