Wednesday 21 August 2013

Why do FormsAuthentication.Cookieless and HttpSessionState.CookieMode have different default values?

Why do FormsAuthentication.Cookieless and HttpSessionState.CookieMode have
different default values?

There's FormsAuthentication.Cookieless which is set to UseDeviceProfile by
default and there's HttpSessionState.CookieMode that is set to UseCookies
by default.
Although they control different subsystems they essentially have the same
consequences and it'd be reasonable to expect that they have the same
defaults and so if anyone is uncomfortable with the defaults he just
changes both settings together.
Why do their default values different?

No comments:

Post a Comment