Are sessions stored in browser cookies?
The Web application does not use cookies. Some of the primary reasons why we do not use them: • Some users consider them at best annoying, and at worst a direct security risk in numerous ways. This risk may or may not be true, depending what one reads, but the psychological effect is real, and some users run their browsers with cookie capability turned off. Cookies have a bad enough reputation that it’s simply not wise to require them in our solution. • Some browsers cannot handle cookies at all; we want our product to run properly with most browsers, including these. • Cookie use requires that a large amount of information be passed back and forth at every transaction. In terms of traffic volume this is a greater security risk than sending a single integer and handling all session information on the server. • Cookies are best for an environment where one visitor has one browser. Our product serves a variety of needs, including the situation where many students may share a single brows
