Re: shopping cart in net.data

[Nathan Andelin <nandelin@xxxxxxxxxxxx>]

Joe,

Thanks for the clarification.  And I tested my accounts at Yahoo and 
Google and confirmed that the login screen in both cases is bypassed 
when the applications are opened from new Firefox windows.  And I'm not 
sure why Yahoo and Google allowed that.

I wrote a Portal that requires a login, and when a user tries to access 
the portal from a new Firefox window, I force a new login, rather than 
accepting that the user is already logged in, through a different 
window.  So I'd suggest doing something like that for security purposes; 
Have the application control how and when a session is created, and 
expired.

Regarding the discussion surrounding the "bug" report, I guess I just 
read it differently than you.  It appeared to me that the guys from 
Mozilla were indeed stumped by it, and responded in kind after they felt 
they had taken enough abuse.

Nathan.