[htmltmpl] Perl CGI authentication and session management

[David C. <dpc...@ho...>]

cg...@li...:

Thilo Planz wrote:
> Everything you send or receive via https is encryted.
> This even includes the HTTP headers, which is why name-based virtual
> hosting does not work with https.

Thanks for your reply. :-)

Okay.


> Depending on how paranoid you are you can also set the "secure
> connection" flag on the cookie, so the cookie will only be send via
> encrypted connections.

Does this work using http?  (A given session may go back and forth
between http and https.)


David