RE: REPOST: NEED HELP URGENT:: internet explorer nullifies sessio n on open new window

[Geoff Howard <gh...@crosswalk.com>]

We have recently discovered a (P3P?) default in IE 6 that affects accepting
cookies across domains.  For example, we had a frameset in foo.com that had
one frame in foomail.com that was setting a cookie in its own domain, but
was refused by IE6's default presumably because the frameset was in a
different domain.  We were able to change this behavior by editing the
preferences mentioned below which were found at Tools>Internet
Options>Privacy(New tab in IE6)>Edit and then adding foomail.com in the list
of accepted cookies domains (which was empty).

Geoff


-----Original Message-----
From: Martin van den Bemt [mailto:martin@isallineed.org]
Sent: Tuesday, November 13, 2001 12:04 PM
To: Tomcat Users List
Subject: RE: REPOST: NEED HELP URGENT:: internet explorer nullifies
session on open new window


Thanx for the valuable info!

Mvgr,
Martin

> -----Original Message-----
> From: David Hamilton [mailto:david.hamilton@financity.co.uk]
> Sent: Tuesday, November 13, 2001 6:09 PM
> To: Tomcat Users List
> Subject: Re: REPOST: NEED HELP URGENT:: internet explorer nullifies
> session on open new window
>
>
> P3P = Platform for Privacy Preferences
> W3C spec for what sites do with your personal info.
>
> IIRC, default option for IE6 will not accept cookies (other that session
> scope ones) if a site does not have a P3P descriptor on your site.
> Obviously this can be changed, but since most IE users never get round to
> changing the default preferences...
>
> More info on setting your site to be P3P compliant:
> http://www.w3.org/P3P/usep3p.html
>
> HTH
>     david
>
> ----- Original Message -----
> From: "Martin van den Bemt" <ma...@isallineed.org>
> To: "Tomcat Users List" <to...@jakarta.apache.org>
> Sent: Tuesday, November 13, 2001 4:42 PM
> Subject: RE: REPOST: NEED HELP URGENT:: internet explorer
> nullifies session
> on open new window
>
>
> > I don't know what p3p is ... Enlighten me ;))
> >
> >
> > Mvgr,
> > Martin
> >
> > > -----Original Message-----
> > > From: David Hamilton [mailto:david.hamilton@financity.co.uk]
> > > Sent: Tuesday, November 13, 2001 5:45 PM
> > > To: Tomcat Users List
> > > Subject: Re: REPOST: NEED HELP URGENT:: internet explorer nullifies
> > > session on open new window
> > >
> > >
> > > Would that be a P3P issue?
> > >
> > > If so, you need to define P3P policy descriptors on your site...
> > >
> > >     david
> > >
> > >
> > > ----- Original Message -----
> > > From: "Martin van den Bemt" <ma...@isallineed.org>
> > > To: "Tomcat Users List" <to...@jakarta.apache.org>
> > > Sent: Tuesday, November 13, 2001 3:54 PM
> > > Subject: RE: REPOST: NEED HELP URGENT:: internet explorer
> > > nullifies session
> > > on open new window
> > >
> > >
> > > > It seems that ie 6 isn't accepting cookies by default (collegue
> > > of mine is
> > > > also using ie 6 and had the same problem, even in 1
> window). He set a
> > > > certain option and everything was working again.  Can you
> confirm that
> > > that
> > > > is the default, else everyone must start using url rewriting to keep
> ie6
> > > > users happy
> > > >
> > > > Mvgr,
> > > > Martin
> > > >
> > > > > -----Original Message-----
> > > > > From: Jim Urban [mailto:jim.urban@netsteps.net]
> > > > > Sent: Tuesday, November 13, 2001 4:21 PM
> > > > > To: Tomcat Users List
> > > > > Subject: RE: REPOST: NEED HELP URGENT:: internet explorer
> nullifies
> > > > > session on open new window
> > > > >
> > > > >
> > > > > Our application does the same thing (openning child browser
> > > windows and
> > > > > closing them) and we have no problems with IE 5.5.  We have not
> tried
> > > I.E.
> > > > > 6.0 yet, so I can't comment on that.  We are running Tomcat 4.0 on
> Win
> > > NT
> > > > > and 2K.
> > > > >
> > > > > Jim
> > > > >
> > > > > -----Original Message-----
> > > > > From: Amit Kelkar [mailto:amit@postmodern.com.au]
> > > > > Sent: Tuesday, November 13, 2001 9:01 AM
> > > > > To: Tomcat Users List
> > > > > Subject: REPOST: NEED HELP URGENT:: internet explorer
> > > nullifies session
> > > > > on open new window
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > -----Original Message-----
> > > > > From: Amit Kelkar [mailto:amit@postmodern.com.au]
> > > > > Sent: Tuesday, 13 November 2001 6:41 PM
> > > > > To: Tomcat Users List
> > > > > Subject: internet explorer nullifies session on open new window
> > > > >
> > > > > The application we are coding requires a new window to be opened.
> This
> > > new
> > > > > window may just contain a JavaScript calendar or a JSP page
> > > > > (dispatched by a
> > > > > servlet).
> > > > >
> > > > > We have been using Internet Explorer 5 till recently to run the
> > > > > application
> > > > > and this has been fine. But we recently upgraded to I.E. 5.5
> > > and 6.0. In
> > > > > both of the new versions, when a new window is opened and then
> closed,
> > > the
> > > > > session in the original window gets nullified.
> > > > >
> > > > > For example, there are places where I need to see a calendar, so
> > > > > I open this
> > > > > calendar in a new window, I use the calendar, then I close
> > > the calendar
> > > > > window. I then press a button (in the main window) to go to
> > > > > another page in
> > > > > my application, where all the session values are now
> > > displayed as null.
> > > > > Subsequent system error statements show that the session is
> > > indeed null.
> > > > >
> > > > > I am not sure this is a tomcat problem or a IE problem (probably a
> IE
> > > > > problem), but was wondering if anybody has experienced anything
> > > > > similar and
> > > > > if they have solved the problem...
> > > > >
> > > > > Note: I am using tomcat 4.01
> > > > >
> > > > > Thanks much in advance,
> > > > >
> > > > >
> > > > > Amit Kelkar
> > > > >
> > > > >
> > > > > --
> > > > > To unsubscribe:
> <ma...@jakarta.apache.org>
> > > > > For additional commands:
> <ma...@jakarta.apache.org>
> > > > > Troubles with the list:
> <ma...@jakarta.apache.org>
> > > > >
> > > > >
> > > > >
> > > > > --
> > > > > To unsubscribe:
> <ma...@jakarta.apache.org>
> > > > > For additional commands:
> <ma...@jakarta.apache.org>
> > > > > Troubles with the list:
> <ma...@jakarta.apache.org>
> > > > >
> > > > >
> > > >
> > > >
> > > > --
> > > > To unsubscribe:
<ma...@jakarta.apache.org>
> > > For additional commands: <ma...@jakarta.apache.org>
> > > Troubles with the list: <ma...@jakarta.apache.org>
> > >
> > >
> > >
> > >
> > >
> > >
> >
> >
> >
> >
> > --
> > To unsubscribe:   <ma...@jakarta.apache.org>
> > For additional commands: <ma...@jakarta.apache.org>
> > Troubles with the list: <ma...@jakarta.apache.org>
> >
> >
>
>
> --
> To unsubscribe:   <ma...@jakarta.apache.org>
> For additional commands: <ma...@jakarta.apache.org>
> Troubles with the list: <ma...@jakarta.apache.org>
>
>
>
>
>
>




--
To unsubscribe:   <ma...@jakarta.apache.org>
For additional commands: <ma...@jakarta.apache.org>
Troubles with the list: <ma...@jakarta.apache.org>



--
To unsubscribe:   <ma...@jakarta.apache.org>
For additional commands: <ma...@jakarta.apache.org>
Troubles with the list: <ma...@jakarta.apache.org>

Re: REPOST: NEED HELP URGENT:: internet explorer nullifies session on open new window

[Steve Brunton <br...@dweeb.turner.com>]

Geoff Howard wrote:
> 
> We have recently discovered a (P3P?) default in IE 6 that affects accepting
> cookies across domains.  For example, we had a frameset in foo.com that had
> one frame in foomail.com that was setting a cookie in its own domain, but
> was refused by IE6's default presumably because the frameset was in a
> different domain.  We were able to change this behavior by editing the
> preferences mentioned below which were found at Tools>Internet
> Options>Privacy(New tab in IE6)>Edit and then adding foomail.com in the list
> of accepted cookies domains (which was empty).
> 


  That or you can actually have your third party domain (even if it's
your domain the browser is thinking that it is a third party domain
since it's not the domain the user actually requested) set a valid P3P
header in HTTP response that it sends back. Since you won't be able to
get every user on the net to edit their IE6 preferences. Is this really
still a Tomcat-User list email discussion though?



-- 
Steve Brunton   <br...@dweeb.turner.com>  Phone: 404-827-2756
Chief Engineer Enterprise Systems    One CNN Center, Atlanta GA
CNN Internet Technologies          ICBM: 84W 23' 45" 33N 45' 29"
<*> It's Been Lovely But I Have To Scream Now <*>

--
To unsubscribe:   <ma...@jakarta.apache.org>
For additional commands: <ma...@jakarta.apache.org>
Troubles with the list: <ma...@jakarta.apache.org>