Hi Frits,
I'm reading the Head First Servlets and
JSP book and it says that it can go both ways. It says that it's used when
You want to know when a session attribute has been added, removed, or replaced (p.182).
and also when
You want to know when a session moves from one VM to another (p.264).
In an exercise (p.264), it asks the reader to mark whether the listener is used on an attribute class or defined in the DD and HttpSessionActivationListener has checkmarks next to both. But I've never written a distributed
Java web app, so I don't know for sure.