SP v4 alpha2 sessions ?

[Scott Cantor]

> How often do encrypted files call to hub for datasealer ? Every request
> or just when needs to write session file (storageAccessInterval) / read
> session file from filesystem ?

The latter of course.

> If encrypted cookiesession is going to hit hub for every request then
> it makes cookiesession less appealing. Would it be possible to have
> this that agent asks hub for key it doesn't have in memory and agent
> does encryption/decryption ?

No, that would require adding dependencies to the Agent and that isn't happening. The Hub has to do the work.

> (Hub would have rotating datasealer just for agent sessions (possible
> to use different sealer / agent)) ?

No. I implemented a check by adding the agent ID into the encrypted data and it checks for a match on decryption. That's much easier then requiring hundreds of keys be loaded.

-- Scott