True Article?

http://hugi.to/dev/google/

I'm not doubting this guys credibility, but I'm just wondering if It is true....

I don't think I would advise doing the part about disabling the session if it's google especially if your session was part of a security feature as people could then just start spoofing google to get past your security feature.

Carp imo. Google follows the header locations easily, I've never had any problems with that. The sessions bit I'd ignore too.