Hi,

I have created a web application that makes use of cookies in a number of areas:

 - storing user details etc.
 - forms-based authentication that issues an authentication cookie

I tested the application to see what would happen if i set i.e. privacy to block all cookies. The application still worked. How is this possible? Is it because the cookies are non persistent?

Thanks
Daryl

Is it possible that after changing the cookie settings, the browser is still SENDING the cookies but not allowing any more to be set? This wouldn't seem to make sense, but I suppose is possible.

Did you close all browsers and clean out cookies so you started fresh?

I would think that "block all cookies" would apply to all cookies, including non-persistant ones.