disabling all session cookies on pageload

Question

For anyone outside the EU, you won't care - unless this ridiculous law is enforced in your neck of the woods. But right now I have about 2 weeks to disable EVERY cookie that is coming from my site.

So far I'm pretty good; know how to globally disable asp.net sessionState, how to turn on and turn off Google, but now I am seeing cookies that I can only guess are the classic asp version of the ASP.Net_sessionId; ASPSESSIONIDASCATCTQ??? There is no expiry date and it seems to appear on page where I have legacy asp in IFrames in asp.net

This is indeed the most insane law I have ever seen and the half million pound fine that goes with it is pretty obscene too - which is why I really need to find an answer, or close down my web site for good...

---

Never a dull moment

Answer 1

Hi Alex,

Welcome to the MSDN Forum.

Please take a look at this documentation: http://msdn.microsoft.com/en-us/library/aa479314.aspx 

<sessionState cookieless="true" />

This the main setting in configuration file.

And you can also try this ASP.net forum: http://forums.asp.net/

Best regards,

---

Mike Feng
MSDN Community Support | Feedback to us
Please remember to mark the replies as answers if they help and unmark them if they provide no help.

Answer 2

Setting sessionState cookieless="true" in web.config file, will store the aspnet session id in URL as encrypted format rather than storing as cookie.

---

Thanks, Nishanth Mohan