Does SessionAuthenticationModule set IClaimsPrincipal on Thread.Principal or HttpContext.Current.User

Wouldn't it be a mistake to set it on the th开发者_运维问答read?

Both HttpContext.Current.User and Thread.CurrentPrincipal are set with an IClaimsPrincipal (the same instance in fact)