ASP Session Problem in frameset serving different domains.

[Jeroen Klooster]

Hi all,

I'm having this problem:

My site(Site A) uses a frameset. In the online shopping section,
loaded in a frame, the ASP app uses the session object to store some
variables for the shopping-cart-functionality, this works fine.

Another site (Site B) is also using a frameset, which is placed on
another domain, which loads the online shopping section from Site A in
a frame. This introduces the following problem on IE6 with
"Medium"(default) privacy setting: Site B loses shopping cart
information. I see the "Privacy Report" icon appearing in the status
bar, stating that it has blocked a cookie. The online-shopping section
however, isn't using any cookies, only session variables. When I set
the Privacy setting to "Low", the shopping cart works fine, but I
don't see any cookie being stored in the cookie folder on my computer.
So what is IE6 blocking?
Somebody got a clue?

 

[Jeroen Klooster]

I guess I figured it out.

A session variable seems to use a cookie to track the current user session.
This cookie is blocked by IE6 with default privacy settings.