Enable / Disable ASP.NET Session State Programmatically?

Question

One of our customers would prefer not to have any cookies on the public parts of their website. Of course, for auxiliary tools, we widely use the state of the session, but this is not necessary for the public parts of the site.

Can I simply turn off the session state for anonymous visitors, but leave it turned on to log in?

Answer 1

In a word ... no.

But you could logically separate your application from different applications that were easily accessible to users.

Those:

wwwroot\myapp ( , cookie)
wwwroot\myapp\private ( , )

, , , - / .

Answer 2

, , - cookie (images/javascript/css ..), cookieless- : : http://www.ravelrumba.com/blog/static-cookieless-domain/

, , 90%

, , , , , cookie.

, ( iframe ), IE , P3P, IE, : http://www.w3.org/P3P/

, , , Asp.Net cookieless-, ssl ( URL-) ( URL-, WCF ..). , cookie