On Mar 23, 2007, at 3:30 AM, Sandofsky wrote: > > Pulling two IDs (session id + nonce) from the DB is better than > pulling 80k that could go in cookies. Why not include nonce in the > default, and if the developer wants the blazing speed (and > corresponding dangers), they can disable it?
80k cannot go in cookies. On most platforms the limit is 4k. The CookieStore raises an error if you try to store too much. And it's a difference between grabbing the data from the DB to deserialize it and grabbing it from a cookie to deserialize it. The main driver isn't performance -- it's not having to keep all of those sessions around on the web server. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Core" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/rubyonrails-core?hl=en -~----------~----~----~----~------~----~------~--~---
