Ah, now I understand your question. You should be able to change the name on up to date Servlet containers, and this is not against the spec - the quote above refers to an older version. Spec 3.0...
Type: Posts; User: copeg
Ah, now I understand your question. You should be able to change the name on up to date Servlet containers, and this is not against the spec - the quote above refers to an older version. Spec 3.0...
I'm not quite sure what about this concerns you. Are you worried about session hijacking? What trait(s) are you suggesting the JSESSIONID exposes?