[WEB SECURITY] timing out user sessions

[Evert | Rooftop]

I'm wondering this..

Is it a bad idea to only time out user sessions after 24 hours or so?

Evert

----------------------------------------------------------------------------
The Web Security Mailing List: 
http://www.webappsec.org/lists/websecurity/

The Web Security Mailing List Archives: 
http://www.webappsec.org/lists/websecurity/archive/
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]