Session stickyness without cookies

[gattu sevalkar]

Hi,

I was wondering if its possible to have session stickyness without a cookie. This will help in cookieless browsers and in situations where cookies are blocked (safari blocks third party cookie by default).

This is not necessarily a bug but a question.

[S. Goodman]

it is usually resolved through appending a get-parameter, but basic-auth or custom-headers might be abused for this as well. the problem with basic-auth: you cannot destroy a session