News for hackers. Stuff that matters.

A comment on Living Without Sessions. Parent comment

Re:Living Without Sessions by briansmith on Monday October 06, 2008 @04:53PM (#325289)
Browsers have that functionality built in as long as you are using RFC 2617 authentication.
[ Parent | on HN ]
Re:Living Without Sessions by newt0311 on Monday October 06, 2008 @05:49PM (#325348)
In theory. What about in practice?
[ Parent | on HN ]
Re:Living Without Sessions by eggnet on Monday October 06, 2008 @08:07PM (#325478)
In my experience, the browser doesn't reliably send the username and password with each request so you get a bunch of re-queries. Cookies don't have that problem, they're always sent.

At least, that's what I saw on the intranet site I built, switched to authenticating with a login page and cookies instead because of it.

[ Parent | on HN ]