1
I was trying to carrying out some cookie tests with a web site my colleagues are maintaining. In Windows Vista/IE8, cookies should be stored in the HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders registry key which points to C:\Users\username\AppData\Roaming\Microsoft\Windows\Cookies
Visiting regular open sites will result in new cookies landing in that directory. However, this particular site is SSL-based, and I do not see the cookies saved here. Where do SSL cookies get stored?
UPDATE
To provide better understanding of the situation, the core "problem" is the cookies of concern are non-persistent cookies, rather than being SSL-based. This causes the cookies to only remain within the memory space of the browser and thus does not get persisted to disk.
Are you able to disclose that site your are refering to? It could be the related cookie(s) might not be persistent and stored in the client browser memory. – o.k.w – 2010-02-19T02:40:28.210
yes there are two cookies used - one for app session (ASP.NET) and another for authentication (custom, not ASP.NET Forms authentication cookie). Both do not have expiry date set on them, which by default should mean they expire on browser close.
By your explanation, it means this kind of cookies NEVER get saved to disk? – icelava – 2010-02-19T02:46:53.083
I'm not sure whether it is an IE only behavior, and I do not have concrete proof. Just my hunch that it makes sense to be stored in memory than as a file. – o.k.w – 2010-02-19T02:58:29.643