▲ | Xelynega 4 days ago | |
You don't need to store multiple login names for seperate pages though, so why can't this just be a site wide cookie? | ||
▲ | speleding 4 days ago | parent [-] | |
That would include the cookie with each request, which is inefficient. And potentially it also can get sent with requests to other subdomains, which may not be desirable from a security point of view (it could be cdn.example.com, owned by someone else) |