[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: Re: Cookies at XML Europe 2004 -- Call for Particip ati

• To: Robert Koberg <rob@k...>
• Subject: Re: Re: Cookies at XML Europe 2004 -- Call for Particip ation
• From: Elliotte Rusty Harold <elharo@m...>
• Date: Tue, 6 Jan 2004 09:01:52 -0500
• Cc: XML-DEV <xml-dev@l...>
• In-reply-to: <3FFA52C0.5060708@k...>
• References: <r02000200-1028-EAEAF76C3FFB11D8B1470003937A08C2@[192.168.124.11]><3FFA52C0.5060708@k...>

At 10:16 PM -0800 1/5/04, Robert Koberg wrote:


>>  I wish my bank offered this, yes.  Given the ID they assigned, the
>>  password is the only thing strongly protecting the account.
>
>that and some random session identifier for your session, right?


Not if they're using the web architecture properly. HTTP is a 
stateless,sessionless protocol. There is no session, nor does there 
need to be one. Each request, GET or POST, is an atomic operation on 
some resource. For example, a bank might offer me the following URIs:

http://www.bankexample.com/elharo/accountsummary/
http://www.bankexample.com/elharo/transactionlist/
http://www.bankexample.com/elharo/transactionlist?startdate=20030101&enddate=20031212
http://www.bankexample.com/elharo/transferfunds/
etc.

Each of these is bookmarkable, linkable, referrable, irrespective of 
where I come from. They are not dependent on any kind of session. 
However, access to each of these resources would require my user name 
and password, which I would supply once, and the browser would repeat 
as necessary. If the browser forgets it (e.g. I quit the browser and 
relaunch it) then I would have to type it in again.

They are, of course, dependent on the state of the resources. For 
instance the actual data served as the representation of 
http://www.bankexample.com/elharo/accountsummary/ would change as 
deposits and withdrawals are made.
-- 

   Elliotte Rusty Harold
   elharo@m...
   Effective XML (Addison-Wesley, 2003)
   http://www.cafeconleche.org/books/effectivexml
   http://www.amazon.com/exec/obidos/ISBN%3D0321150406/ref%3Dnosim/cafeaulaitA

• References:
  • Re: Re: Cookies at XML Europe 2004 -- Call for Particip ation
    • From: "Simon St.Laurent" <simonstl@s...>
  • Re: Re: Cookies at XML Europe 2004 -- Call for Particip ation
    • From: Robert Koberg <rob@k...>

• Prev by Date: Re: Re: Cookies at XML Europe 2004 -- Call for Particip ation
• Next by Date: RE: Re: Cookies at XML Europe 2004 -- Call for Particip ation
• Previous by thread: RE: Re: Cookies at XML Europe 2004 -- Call for Particip ation
• Next by thread: Re: Re: Cookies at XML Europe 2004 -- Call for Particip ation
• Index(es):
  • Date
  • Thread