Christopher Arndt schrieb: > If I understand correctly, max-age will be set to visit.timeout * > 60 and expires to utcnow + visit.timeout * 60, right?
Right. > Or do we need another config value for the cookie expiration time? I don't think so. The cookie timeout should be in sync with the timeout enforced by the visit manager. > While we're at it, should we add support for the "Discard" cookie > option? Do browsers support it? Tried this, but it is only available in cherrypy did not like it (seems that "cookielib", which exists since Py 2.4, knows about Discard, but the "Cookie" module not). Discard is the default anyway if not Max-Age or Expires ist set. The only advantage would be to have timed-out session cookies. But I'm not sure whether any browser supports this, and the VisitManager has its own timeout anyway. -- Christoph --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "TurboGears Trunk" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/turbogears-trunk?hl=en -~----------~----~----~----~------~----~------~--~---
