Posted by Brian Levantine on November 25, 2003 at 10:37:19:
In Reply to: Re: IP Addresses connected to an Anywhere Host posted by Jon Sacks on November 25, 2003 at 09:29:39:
Hi Jon. The problem with tracking a user based upon an IP address is that when the user is behind a firewall you won't be able to determine who they are because you'll get the address of the firewall not the client machine. The SessionID will always identify the correct client computer but ultimately it will be the responsibility if the application to determine who the user actually is by implimenting some sort of UserID/password challenge system. Once a user has been authenticated, the SessionID can be used to track the user across Comet programs. The first 32 bytes of a SessionID is unique to a computer and the remaining 5 bytes uniquely identifies the session instance on that computer.