title: Is there danger to pass user id session from one website to another trusted partner website?
body: <p>What's the risk if it is between 2 websites or 2 webservices or between a site url and flash or embedded javascript ?</p>