RE: keeping sessions when switching from http to https

2001-07-26 Thread Li Liang
e developers must realize this issue since this is something happening in many cases. Thanks. -Original Message- From: Brigger Patrick [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 26, 2001 2:40 AM To: '[EMAIL PROTECTED]' Subject: RE: keeping sessions when switching from http to

RE: keeping sessions when switching from http to https

2001-07-25 Thread Brigger Patrick
]] Sent: Mittwoch, 25. Juli 2001 20:09 To: [EMAIL PROTECTED] Subject: RE: keeping sessions when switching from http to https I guess that's the way Tomcat parses the session info from request. When it gets the cookie, everything is fine that it can get "jsessionid" from the cooki

RE: keeping sessions when switching from http to https

2001-07-25 Thread Li Liang
n [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 25, 2001 11:04 AM To: '[EMAIL PROTECTED]' Subject: RE: keeping sessions when switching from http to https Are you encoding the cross-protocol links (with HttpServletResponse.encode[Redirect]URL())? The only reason I ask is that it seems stran

RE: keeping sessions when switching from http to https

2001-07-25 Thread William Kaufman
both. -- Bill K. > -Original Message- > From: Brigger Patrick [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, July 24, 2001 11:05 PM > To: '[EMAIL PROTECTED]' > Subject: RE: keeping sessions when switching from http to https > > > Wh

RE: keeping sessions when switching from http to https

2001-07-25 Thread Brigger Patrick
When I try with cookies enabled, it works both on Netscape and IE 5. Cookies disabled does not work on either. Pat -Original Message- From: Mike Spreitzer [mailto:[EMAIL PROTECTED]] Sent: Dienstag, 24. Juli 2001 19:13 To: [EMAIL PROTECTED] Subject: Re: keeping sessions when switching

RE: keeping sessions when switching from http to https

2001-07-25 Thread Brigger Patrick
Title: Re: keeping sessions when switching from http to https Dear David,   Yes, with cookies turned on it alsow works on my end, no problem. However, many people have cookies turned off, and for any real world application, it MUST also work when cookies are turned off.   Go to Netscape

Re: keeping sessions when switching from http to https

2001-07-24 Thread Mike Spreitzer
Be careful when you experiment and report on this. I have found that IE 5 carries cookies from http to https but Netscape 4 does not. I have only tested this with cookies, not URL-rewriting. I'm grumped by this problem, but it's not critcal for me yet --- for my current site, I think I can g

Re: keeping sessions when switching from http to https

2001-07-24 Thread David Cassidy (Programmer)
Title: Re: keeping sessions when switching from http to https This is rubbish. I'm using tomcat and switching between secure and non secure sites and the session is following no probs. (i'm using cookies though) Is your context the same on the secure and insecure ones ? Can y

RE: keeping sessions when switching from http to https

2001-07-24 Thread Li Liang
same shopping cart. I am also very interested in knowing such a solution. Thanks. -Original Message- From: Brigger Patrick [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 24, 2001 12:07 PM To: '[EMAIL PROTECTED]' Subject: RE: keeping sessions when switching from http to https

RE: keeping sessions when switching from http to https

2001-07-24 Thread Brigger Patrick
- From: Wyn Easton [mailto:[EMAIL PROTECTED]] Sent: Dienstag, 24. Juli 2001 15:17 To: [EMAIL PROTECTED] Subject: Re: keeping sessions when switching from http to https What if you don't create the session until you switch to https? A session is pinned to a domain. The domain includes the scheme

Re: keeping sessions when switching from http to https

2001-07-24 Thread Wyn Easton
What if you don't create the session until you switch to https? A session is pinned to a domain. The domain includes the scheme (http or https) so when you switch from http to https you will loose your session. Also the port number will change, which changes the domain. --- Brigger Patrick <[EM

keeping sessions when switching from http to https

2001-07-24 Thread Brigger Patrick
Hi, Without cookies, I loose my session object when switching from http to https using encodeUrl. Can anyone help? Otherwise, it makes Tomcat really useless in real life applications, where it is absolutely necessary to support customers that have cookies disabled. Thanks, Pat