Cookies are not very clear. There are three areas of cookies that need clarification:

a) Lifetime of cookies If cookie is not persistent, then it is tied to the consumer's session. If cookie is persistent, the cookies life time is governed by its expiration by is also tied to the producer registration or pseudo registration in the case in which a registration was not formally made.

b) When cookies are passed to the producer/resource For WSRP web service calls, the path of the end point implementing the WSRP interface is used. For resource requests, the path of the resource is used for out-of-bounds resource requests.

c) When initCookie is called Per consumer session for perUser protocol. Per consumer session per user per group for perGroup protocol. The producer should not make any assumptions of the consumer's session and how it relates to users.

Nader