SSL session persistance

I would appreciate some guidance / help on the following..

1. I set up an initial SSL session with UID + PWD

2. I then open a new window (from the inital HTTPS window)
and authenticate again (using a valid cert), using client
authentication. (i.e a 2 layer security model). I copy the
URL after authentication.

3. I then close window in 2. above

4. I then paste in the URL from "inside" the second
session into a new browser session, and get straight back
to the secure site without any further client
authentication....



I am using IE6 SP1

Q. Is this typical behavior ?

Is it a documented issue ? ('cos I cant find anything)

If so are there any workarounds to terminate the session
from the browser ?

Thanks for any direction

Floyd

S
Sat Jul 26 08:32:42 CDT 2003

It's kinda well-known. Two windows are by default the same instance of
Internet Explorer and share security contexts. If you'll launch a separate
instance of IE (via desktop shortcut), that won't happen.

--
Svyatoslav Pidgorny, MS MVP, MCSE
-= F1 is the key =-

"Floyd" <nospam@homeleigh.com> wrote in message
news:031c01c352fe$2b6adba0$a501280a@phx.gbl...
> I would appreciate some guidance / help on the following..
>
> 1. I set up an initial SSL session with UID + PWD
>
> 2. I then open a new window (from the inital HTTPS window)
> and authenticate again (using a valid cert), using client
> authentication. (i.e a 2 layer security model). I copy the
> URL after authentication.
>
> 3. I then close window in 2. above
>
> 4. I then paste in the URL from "inside" the second
> session into a new browser session, and get straight back
> to the secure site without any further client
> authentication....
>
>
>
> I am using IE6 SP1
>
> Q. Is this typical behavior ?
>
> Is it a documented issue ? ('cos I cant find anything)
>
> If so are there any workarounds to terminate the session
> from the browser ?
>
> Thanks for any direction
>
> Floyd
>
>
>