The ASPSessionID cookie that gets assigned when users begin a session. Are 

these unique for eternity? I wouldn't think so, but can't find anything on 

it. My hunch is it's just a random key that's uniquely generated and 

compared to all other current ASPSessionIDs in memory to make sure it's 

not the same as any other...



Any information on this appreciated.



If you could reply direct, that would be great - only get digest mode.



Sincerely,



Bryan Ax

Developer

AMC Cancer Research Center

Hi Bryan,



The Session object in ASP creates IDs randomly, but there is the chance of

them repeating at some point, and they're not completely unique, in that

they only run with that value once and only once.  The probability would

really be rare that you would get the same one to appear twice in rapid

succession, though.



Good luck!



A friend and fellow ASP coder in Guam,

Jason





----- Original Message -----

From: "Bryan Ax" <axb@a...>

To: "ASPToday Discuss" <asptoday_discuss@p...>

Sent: Monday, January 14, 2002 1:25 PM

Subject: [asptoday_discuss] ASPSessionID





> The ASPSessionID cookie that gets assigned when users begin a session. Are

> these unique for eternity? I wouldn't think so, but can't find anything on

> it. My hunch is it's just a random key that's uniquely generated and

> compared to all other current ASPSessionIDs in memory to make sure it's

> not the same as any other...

>

> Any information on this appreciated.

>

> If you could reply direct, that would be great - only get digest mode.

>

> Sincerely,

>

> Bryan Ax

> Developer

> AMC Cancer Research Center

>

Hi again Bryan,



I found something more documented that hopefully will give you some peace of

mind about using ASP's Session object.  ASP whitepapers notes that Session

IDs are guaranteed to not be replicated by any other user logged on to a

site at the same time, but may do so in the future.  So there's some

built-in security.



HTH,

Jason





> ----- Original Message -----

> From: "Bryan Ax" <axb@a...>

> To: "ASPToday Discuss" <asptoday_discuss@p...>

> Sent: Monday, January 14, 2002 1:25 PM

> Subject: [asptoday_discuss] ASPSessionID

>

>

> > The ASPSessionID cookie that gets assigned when users begin a session.

Are

> > these unique for eternity? I wouldn't think so, but can't find anything

on

> > it. My hunch is it's just a random key that's uniquely generated and

> > compared to all other current ASPSessionIDs in memory to make sure it's

> > not the same as any other...

> >

> > Any information on this appreciated.

> >

> > If you could reply direct, that would be great - only get digest mode.

> >

> > Sincerely,

> >

> > Bryan Ax

> > Developer

> > AMC Cancer Research Center

> >

>