I do not know if this is the right stackexchange site to ask this question, but I believe that is relevant. I am trying to implement an e-voting protocol. At some point the protocol says that server 1 sends a session key to the voter, in order for the voter to use it at server 2, to insert his vote.
How someone can execute a query at a server, without logging in with credentials, but only with a session key?
How is this session key created by the first, and how is recognised by the second server?
Thanks in advance
Andreas
