persistence of user consent

[Ian Young]

> On 19 Feb 2015, at 15:58, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> On 2/19/15, 3:54 PM, "Ian Young" <ian at iay.org.uk> wrote:
> 
>> Is the consent information stored in a cookie per SP, or in one cookie 
>> covering all SPs? That would obviously change the meaning of the "3-4 
>> days with no activity" a fair bit.
> 
> One for all. It's storing the map that would be in memory or would be 
> stored in a DB table into one cookie.

OK, there's definitely something fishy then because I am pretty sure that I haven't been idle for three days. Is it possible that it's only re-sealing the blob and sending a new cookie when a change is made?

    -- Ian




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5250 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20150219/f99a6d4c/attachment-0001.bin