posted 13 years ago
where is session generated? in Web Server?
I open a website in IE (let said IE1), then when open another IE (IE2) to that website, I invalidate my old session and create a new one (request.getSession(new)), then I go back to the old IE (IE1) and continue work, I feel surprise that the old IE (IE1) can use the new session in IE2 (they have same sessionID), at first I assume if I invalidate the old session, the old IE (ie1) should stop work, but now I find that the old IE can get the new session used by IE2. so in fact where is session gerneated? in Web Server? why the old IE can use the session generated by new IE (IE2)?