2008/8/9 Randy Burgess <[EMAIL PROTECTED]> > As long as you set the cookie path and stick to that path it > doesn't matter where the user enters the site.
Well, not entirely, it seems to me. Say, for example, that I were to set the path to "/something/very/complex/and/unwieldy", the browser would make those cookies available with the request only when the namespace of the request were to be the same (or a child) of that long path. Which is why, as you point out, the only practical options are "/" or "contextPath()". (In which case, indeed, it doesn't matter where the user enters.)