meanwhile I've seen another software, which included a "tracking fallback".
It didn't let the user specify which tracking method to use (very good, because most users I had to deal with didn't even know what a "browser" is).
First the software tried to set and read a cookie, if the read failed, the session ID was automatically used within the url -
this way users with "low" security, accepting cookies, could *stay* logged in if they wanted to, and paranoid people with strange browser preferences or even stranger browsers would get in, too.
a fallback option seems quite nice to me, though it reduces the chances of shutting out users AND less support-work for me
flint
flint@poisonfree.com