Joe Presbrey wrote: > Nathan, SSL_SESSION_ID stays constant with default Apache+browser > settings until you restart your browser / reselect client cert / > timeout. Thanks for clarifying :)