- From: Martin J. Dürst <duerst@it.aoyama.ac.jp>
- Date: Wed, 29 Aug 2018 18:05:54 +0900
- To: Willy Tarreau <w@1wt.eu>
- Cc: HTTP Working Group <ietf-http-wg@w3.org>
On 2018/08/29 02:14, Willy Tarreau wrote: > On Tue, Aug 28, 2018 at 10:02:34AM -0700, Daniel Veditz wrote: >> On Tue, Aug 28, 2018 at 1:05 AM, Willy Tarreau <w@1wt.eu> wrote: >> >>> - when a site delivers a cookie with "too long" a duration, ask the >>> user if he's willing to accept it or to trim the duration to a >>> shorter one. Let the user configure the max duration before warning. >>> >> >> No asking! Opinionated browsers could do this today if they wanted to, but >> it should not ask the user! Of course there should be a way for a user to >> modify the default max in with other cookie settings. From everything I have heard about users and browsers, my guess is that users would blame the browser and switch to another browser. That's true of general browsers, it might not be true of specific privacy-enhanced browsers (which is maybe what you mean with "opinionated"). Regards, Martin.
Received on Wednesday, 29 August 2018 09:06:20 UTC