I am building a web application and I need to know whether I can share the Same session or not between http or https?
+2
A:
Of course you can. Most website login mechanisms do it. They transfer password in cleartext over secure HTTPS, and after authenticated, they redirect you back to fast HTTP.
Pavel Radzivilovsky
2010-06-14 11:46:06
+2
A:
Yes, Sessions are shared across Http and Https requests.
this. __curious_geek
2010-06-14 11:56:59
Do you have a reference for that? (I believe you, I just like to see these things written somewhere official.)
T.J. Crowder
2010-06-29 11:59:44