RE: Tomcat IP and Session ID's

2006-02-24 Thread Paul Roberts
Thank you. I was wondering, over and above encrypting the communications channel how does HTTPS help to prevent session ID hijacking? Regards Paul Roberts. From: "Peter Crowther" <[EMAIL PROTECTED]> Reply-To: "Tomcat Users List" To: "Tomcat Users List"

Tomcat IP and Session ID's

2006-02-24 Thread Paul Roberts
I have a question regarding IP address and session ID's. If a user on IP Address 1 connects to the Tomcat server and is given session ID A, what happens if that session ID is hijacked by someone on IP address 2 and then used for a further request. How would the different version of Tomcat react t