[Bug 16739] Should the format of Session ID be more strictly defined?

https://www.w3.org/Bugs/Public/show_bug.cgi?id=16739

--- Comment #2 from Mark Watson <watsonm@netflix.com> 2012-09-26 16:10:48 UTC ---
I suggest we place no requirements on the SessionID other than that it must be
unique within the browsing session (right term ?).

If proof of key release is supported we add the additional requirement that it
be unique for this browser instance. This is the wrong term, but what I mean is
the same thing that owns Local Storage, say. An application could then create a
globally unique session Id by storing a unique 'browser instance id' in
Location Storage and combining this with the session id. Anyone know the
correct term ?.

-- 
Configure bugmail: https://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.

Received on Wednesday, 26 September 2012 16:10:58 UTC