Disabling SessionStateModule

Question

Recently I found this article and decided to remove unnecessary httpModules.

I disabled SessionStateModule:

<httpModules>
    ...
    <remove name="Session" />
    ...
</httpModules>

but I still can use Session object all the same. Why? Perhaps, I didn't understand correctly the recommendation?

Answer 1

What say there is to remove unnecessary modules - if you use the Session DO NOT remove it!

In general say that is better to fully remove the modules than just disabled them on web.config because the disables flag is called too many times, but if you totally remove you avoid this extra call.