Question about Session data

[Jeff]

Hello,

I have a simple question about how session data is stored in CheckBox. There are two options, Cookie, and Cookieless. Is the session data encrypted for both these methods? If so, how strong is the encryption?

Also, how is the data stored if you choose the "Cookieless" option?

Thanks,
-Jeff

[pwiesner]

This option only applies to anonymous respondents. In the case of registered Checkbox users all session information is maintained server side. When enabled a cookie is saved for anonymous respondents. The content of this cookie is simply an automatically generated guid; no encryption is used. The guid is used to associate a particular anonymous respondent with their response. If this option is disabled no session information is saved for anonymous respondents. In this configuration survey restrictions, such as maximum number of response or the ability to resume/edit a response, are none functional.