Hi,

we are currently investigating the cookie management of lightning/thunderbird when two or more connections from the same endpoint to the same server but with different user authentications are used. Is owncloud actually generating individual "sessions" for each user or will all users be on the same session (which does not work of course)?

We currently only have one cookie store per server/origin and are evaluating if it is worth to change that. If owncloud is not generating individual sessions, this would be useless of course.

At the moment, the only way to have two or more connections to the same server but with different user authentications is by rejecting cookies.

Is there any drawback from rejecting cookies besides more overhead on the 
servers auth module? Are there any security issues?


Thanks for your help,
John

_______________________________________________
Devel mailing list
Devel@owncloud.org
http://mailman.owncloud.org/mailman/listinfo/devel

Reply via email to