Hello all,

I've looked though, what I believe to be, the relevant areas in the MySQL
docs as well as standard search engine searches without luck. I was
hoping to find some documentation that would tell me:
- how MySQL session Ids are generated (specifically, are they considered
"random")
- does MySQL require session ids sent from the client to be server
generated (ie the client can't make one up and that is used for the session)
- is there any other relevant security protections or concerns for mysql
session management that would be of interest?

Thanks,

Steve