Does any have, or know of, a description of cookie usage by the Shibboleth
(i.e. ex-Internet2) IdP and SP software? Over in shibboleth-users, Scot
asserted
> I believe both the IdP and SP explicitly do not document their cookie
> use to avoid anybody depending on them for any purpose. They're not part
> of the public API of the software.
but there's this pesky EU directive that, by some readings, suggests I
need to at least document cookie use. I'd rather not have to work it out
by experiment.
Jon.
--
Jon Warbrick
Information Systems Development, Computing Service, University of Cambridge
|