For others who may be reading this thread (and to expressthanks/credit where appropriate, the following was provided by theColdFusion guru himself: benforta: you can use the same thing, if you set a SESSION onthe CF server and the id and token will get set, as RemoteObjectuses HTTPbenforta: But, gen...

bump

I'm a newbie converting a cfm site to flex and have aquestion regarding the security implications of managing state onthe client. In my cfm site I set a SESSION.variable for "isSignedIn"which CF server stores and (via CFToken cookie accompanyingsubsequent page requests) associates with say OwnerID=1...