I don't know much about cloaking, and so I have the following question:
For my site, I was thinking of changing the session code so it doesn't start a session when it's a spider that is "browsing" rather than a human being. The reason for this is that then I I don't have the risk of urls with session ID being indexed, or SEs geting confused by the session ID.
Would this be considered cloaking? And would I run the risk of being penalised for that?