RE: [xml-dev] Re: Cookies at XML Europe 2004 -- Call for Participation

Joshua Allen wrote:
> The login token stored in the cookie 
> can always be embedded in the URL path,
	One of the original motivations for doing cookies was to
remove "state information" from the URL so that it wouldn't compromise
privacy by showing up in referral string information. If you embed
"cookies" in URL's you end up leaking private data between sites. This
is not good.
	See www-talk archives for 1994 or so to see the discussions on
"state management" (i.e. cookies).

		bob wyman