I think his statement strongly implied that he was speaking about session ids of site he doesn't own. If you own the site, saying that "using the session ids wo

I think his statement strongly implied that he was speaking about session ids of site he doesn't own. If you own the site, saying that "using the session ids would be illegal" is a stretch, at least without qualifiers. So, pretty sure he was talking about other people's sites.