should there be an average time length for a sessionID to exist?

[uwezukwechibuzor]

Will Long Running Session Pose Security Challenges To the system?

[uwezukwechibuzor]

Whether or not to create a new session after a certain period of time, such as 24 hours, depends on the specific requirements and limitations of the trading system being used, as well as the needs of the parties involved in the trading activity.

In general, FIX sessions can last for as long as necessary to support the trading activity. However, there may be practical reasons for creating a new session after a certain period of time, such as to maintain system performance or to manage risk.

For example, some trading systems may require periodic session resets to ensure that both parties have up-to-date information about each other's state and to prevent potential issues with message sequencing. Additionally, creating a new session after a certain period of time may help to manage risk by reducing the impact of any potential security vulnerabilities or errors that may arise during the course of a long-running session.

Ultimately, the decision of whether or not to create a new session after a certain period of time depends on a variety of factors, and should be based on the specific requirements and limitations of the trading system being used, as well as the needs of the parties involved in the trading activity.

[uwezukwechibuzor]

comments are welcome here