Manual page tells about bunch of advantages of the J2EE session management (SM) over the ColdFusion SM, but what about other side? Which problems can appear when using J2EE
It is harder to make the cookie HTTPOnly, at least with JRun.