Comment 9 for bug 392101

Revision history for this message
Stuart Metcalfe (stuartmetcalfe) wrote :

Arguably, both sites should check for cookies if they require them, as it's possible for a user to reject cookies for each site independently. SSO should certainly perform its own check.