views:

72

answers:

2

I am building a web application and I need to know whether I can share the Same session or not between http or https?

+2  A: 

Of course you can. Most website login mechanisms do it. They transfer password in cleartext over secure HTTPS, and after authenticated, they redirect you back to fast HTTP.

Pavel Radzivilovsky
+2  A: 

Yes, Sessions are shared across Http and Https requests.

this. __curious_geek
Do you have a reference for that? (I believe you, I just like to see these things written somewhere official.)
T.J. Crowder