Knowledge Base |
|
|
| TID | 530 ( s530 ) |
| QuickLink | http://www.stone-ware.com/swql.jsp?kb=s530 |
| Category | Cookies |
| Summary | Cookie domains |
| Details | How do cookies use the domain of the portal ? |
| Resolution | When a user logs into portal.company.com and runs a webapplication like
mymail.company.com, if that webapp sets some cookies, the cookie domain would be company.com. But if you made the webapp mywebapp.doctors.company.com then the cookie domain would be doctors.company.com When the browser went to compare domains to decide if the app can use that cookie, it would compare company.com with doctors.company.com and the cookie would be denied. Some customers want to login to the portal with the dns name of company.com. This causes a problem with cookies. Because the way cookies work, it would try to set a domain cookie of .com which is not allowed due to security contraints (often called the two dot rule)./ |