Best Practice in Managing HTTP-Based Client Sessions

✍ Scribed by Gunter Ollmann

• Book ID: 104391881
• Publisher: Elsevier Science
• Year: 2003
• Tongue: English
• Weight: 218 KB
• Volume: 2003
• Category: Article
• ISSN: 1353-4858
• DOI: 10.1016/s1353-4858(03)00611-1

✦ Synopsis

An important aspect of correctly managing state information through session IDs relates directly to authentication processes. While it is possible to insist that a client using an organization's Web application provide authentication information for each "restricted" page or data submission, it would soon become tedious and untenable. Thus session IDs are not only used to follow clients throughout the Web application, they are also used to identify each unique, authenticated user -thereby indirectly regulating access to site content or information.