title: ASP.NET MVC and using cookieless sessions
body: <p>There seem to be conflicting opinions about ASP.NET MVC and cookieless sessions.  <a href="http://forums.asp.net/t/1725297.aspx" rel="nofollow noreferrer">Some people</a> say MVC downright does not support, but <a href="https://stackoverflow.com/questions/15176355/asp-net-mvc-4-need-to-use-sessions-but-cant-use-cookies">others</a> seem to be using MVC and cookieless sessions without any issues.  If I create a test MVC project and enable cookieless sessions everything seems to work fine.  Does anyone have a definitive and supported answer on the use of cookieless sessions with MVC, i.e. why or why not to use them?  </p>
  
  <p>Note: I am aware of the <a href="http://brockallen.com/2012/04/08/cookieless-session-considered-dangerous/" rel="nofollow noreferrer">security implications</a> of using cookieless sessions, but in my case and for internal applications the risk of other users stealing sessionId's is not <em>too</em> much of an issue.</p>