I did a little bit of checking on the relationships between the Session management spec and third party cookies. In short, it varies. In Safari and older Chrome, it works. In Chrome after v.17(?), if the user sets the block third party cookies option, it does not. I have not tested IE. Nat Sakimura