I am trying to login a user using a jsp over https and i am storing his userid and some more personal info in a session variable session.setAttribute(“userid”,98767) when i move on to another non secure jsp ex: http://www/xyz.com/test.jsp and try to acces the session variable session.getAttribute(“userid”) i always get a null value, where as if i set the session variable in a normal http jsp i can access the variables properly.
Any help/pointers are highly appreciated.
I’d imagine browsers assume cookies set via HTTPS shouldn’t be transferred over HTTP, as they may be sensitive data.