Shibboleth Developers

[André Cruz <>]

On Dec 22, 2008, at 4:06 PM, Scott Cantor wrote:

> > I tested again and surprisingly it seems that IE indeed is blocking  
> > the
> > cookies with or without this header. Nevertheless, IE seems in some
> > cases to preselect the right entry in the drop down list even if  
> > cookies
> > are blocked (I haven't checked if it really doesn't send them but at
> > least IE says it blocked the cookie... and I wouldn't dare not to  
> > trust
> > Microsoft, would I :) ? ). This even is the case across restarts of  
> > IE...
> > So, I assumed it could have to do something with IE remembering  
> > entries
> > from some drop down lists provided name/id of the form/select  
> > element.
> > However, this also didn't turn out to be the case because renaming  
> > form
> > and select element didn have any effect either. So, right now I don't
> > really know why it seems to unless I delete the cookies in the temp
> > folder and do a restart.
>
> That in a nutshell is why I was skeptical. ;-)
>
> I'm somewhat anal about understanding why things work or don't work  
> before I
> come off the fence about it. With about 90,000 users here,  
> inevitably it
> doesn't work for a lot of them if there are any holes.

Even so you should try it. It's working here with IE 6, 7,8 and we  
have 5M users.

Just don't forget to send the header with all the content served from  
the 3rd party domain. We were not sending it with static content and  
sometimes it didn't work.

André