Shibboleth Developers

["Scott Cantor" <>]

> I tested again and surprisingly it seems that IE indeed is blocking the
> cookies with or without this header. Nevertheless, IE seems in some
> cases to preselect the right entry in the drop down list even if cookies
> are blocked (I haven't checked if it really doesn't send them but at
> least IE says it blocked the cookie... and I wouldn't dare not to trust
> Microsoft, would I :) ? ). This even is the case across restarts of IE...
> So, I assumed it could have to do something with IE remembering entries
> from some drop down lists provided name/id of the form/select element.
> However, this also didn't turn out to be the case because renaming form
> and select element didn have any effect either. So, right now I don't
> really know why it seems to unless I delete the cookies in the temp
> folder and do a restart.

That in a nutshell is why I was skeptical. ;-)

I'm somewhat anal about understanding why things work or don't work before I
come off the fence about it. With about 90,000 users here, inevitably it
doesn't work for a lot of them if there are any holes.

-- Scott