WebApp Sec: Re: improvements in session management?

[Michael Ströder <michael () stroeder com>]

dd wrote:
> This could include checking things like user agent, 
> acceptable languages, but better by adding data that changes on each 
> request via cookie, form field, etc (call this the SINGLEUSEID).
I see some problems with the usability (browser's back-button and concurrent 
HTTP requests for images) when implementing session IDs which are only valid 
for the next hit.
Ciao, Michael.