[snip]
I wish the servlet/EE spec included a "shared HttpSession in same
ear" feature. Weblogic 9 apparently has this.
FWIW, one potential security issue with something like this is the various web applications would have to share class loaders, because normally one webapp cannot see classes loaded by another. That would have implications on redeploying as well -- but that probably matters less if you're using an EAR for this, since you're likely redeploying the whole shebang anyway.
-H
Craig
