session initiator / wayf question

[Cantor, Scott]

On 10/26/14, 3:58 PM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>But this started after we did a data center move so I have to assume that
>the issue is on my side, no?

Browsers in general behave in specifically predictable ways with cookies.
So a loop is *always* a web server misconfiguration. Whose fault it is is
academic, sometimes it's just a user doing something that isn't expected
or predicted and hitting a URL that wasn't meant to be used, as with the
common http://redirects to https:// to set a cookie marked secure, then
back to http:// and the cookie doesn't get sent back over http.

Same for a hostname that wasn't meant to work, but maps to the right
server.

-- Scott