46163 - Cookies via SSL don't get saved

Status: VERIFIED INVALID

(Core :: Networking: Cookies, defect, P3)

Description

[Matthew Cline]

Build 2000072009, Linux 2.2.14, RedHat 6.1

I'm not sure about this, since I've only seen it on Source Forge, but
it seems like cookies that are sent/granted via SSL/HTTPS aren't saved
when the browser shuts down; I've looked in the cookies file and there
aren't any cookies from Source Forge there.  To reproduce:

1) Get a Source Forge account at http://www.sourceforge.net/
2) Log in, and select the "stay with SSL" option.
3) Quit Mozilla without loging out
4) Start up Mozilla and go to Source Forge.  You will no longer be logged
   in.

Comment 1

[Stephen P. Morse]

It would be very unusual for a site to let you stay logged in across browser 
sessions -- especially an ssl site.  The cookie, if there is one, is probably 
set to expire at the end of the session and that would explain what you have 
observed.

To verify this, use the cookie manager to view the cookies that are set after 
step 2.  If there is a sourceforge cookie, when is it set to expire?

Closing this out as invalid.  If I'm wrong and the site really set a cookie with 
more permanance, then please reopen.

Comment 2

[Matthew Cline]

You're right, the cookie is set to expire when the browser closes.
Marking verified.