Re: [ot] Cookie

2006-03-29 Thread Laurie Harper
Marcio Ghiraldelli wrote: How do I unset a Cookie with a Struts Action? Not sure, but I think you need to call addCookie() and pass in a cookie with the right name and a null value. L. - To unsubscribe, e-mail: [EMAIL

Re: [OT] Cookie

2005-12-14 Thread Deepa Khetan
Thanks Alexandre!! Just couple of doubts... what do u mean by It doesn't encrypt the values stored on the client. You have to do it yourself. ?? Does that mean that the values will be visible in clear text?? How can i check how the data is getting encrypted over the network?? Do i need to use some

Re: [OT] Cookie

2005-12-14 Thread Tamas Szabo
According to my knowledge cookie.setSecure(true) doesn't encrypt anything. If you call it then the cookie will be sent over only over a secure connection. So if you have an unsecure connection the cookie will not be used. Tamas On 12/14/05, Deepa Khetan [EMAIL PROTECTED] wrote: Thanks

Re: [OT] Cookie

2005-12-14 Thread Alexandre Poitras
Yeah your right. I wasn't clear in my explanations. It would only allow you to use it on a https connection so it is sent encrypted on the network. It means your cookie will be unavailable when the user connect through a normal Http connection (http). It will only be available through a Http/SSL

[OT] Cookie

2005-12-13 Thread Deepa Khetan
Hi!! I am not geting any help from net about this issue. So, postin this question on this group. I want to know exactly what difference does it make if i set Cookie.setSecure(true)?? I am using SSL in my application. What are the advantages or disadvantages of doing it from security point of view.

Re: [OT] Cookie

2005-12-13 Thread Alexandre Poitras
If you set this property to true, your cookie will be sent over an HTTP/SSL (https) connection. What it means is that every value to be stored in this cookie are encrypted before being sent on the network. This way, any malicious third party who are *sniffing* the network can't read the values to

Re: [OT] Cookie

2005-12-13 Thread Paul Benedict
If you setSecure(true), the cookie will ONLY be available through HTTPS. __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -