Reusing Session ID
        Posted  
        
            by lockedscope
        on Stack Overflow
        
        See other posts from Stack Overflow
        
            or by lockedscope
        
        
        
        Published on 2010-03-23T10:29:26Z
        Indexed on 
            2010/03/23
            10:33 UTC
        
        
        Read the original article
        Hit count: 241
        
I am confused with the following sentence(with bold) from Microsoft about Session IDs. It seems to say the obvious, if we reuse a valid Session ID then we do not need to create a new Session ID. Am i missing something? What is reusing in this context? Using the Session ID as an identifier in database or etc is reusing or what?
Therefore, you can reuse session IDs for several reasons. For example, if you reuse session IDs, you do not have to do the following:
Create a new cryptographically unique session ID when you are presented with a valid session ID.
© Stack Overflow or respective owner