Do Codeigniter people simply have no f*cking clue?

[eluser]Narf[/eluser]
The Session library does indeed have many flaws.
CI 3.0 will fix quite a lot of them and also introduce a "native" driver that utilizes PHP's own basic sessions.
No, the NSA was not involved - whoever wrote the session library years ago just didn't do it properly, the only reason it is being kept is for backwards compatibility.

@InsiteFX

The underscore problem is fiction, IE has no problems with it. This confusion comes from a MS support reply to somebody who did have a problem with underscores, but in the cookie_domain, not the name. This is completely natural as underscores are not allowed in domain names.
If you had a problem with underscores and it got "resolved" by removing the underscore from the cookie name, then it was simply a name collision and nothing else.