Re: Cookie crumbling

On Tue, Oct 22, 2013 at 9:39 AM, Martin Thomson
<martin.thomson@gmail.com> wrote:
> On 22 October 2013 09:33, Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com> wrote:
>> I think the intermediary in this case cannot restore the reordering of the
>> cookie as the browser sent them.
>
> The order is canonical.
>
>        *  Cookies with longer paths are listed before cookies with
>           shorter paths.
>
>        *  Among cookies that have equal-length path fields, cookies with
>           earlier creation-times are listed before cookies with later
>           creation-times.
>
> It's trivially possible to recreate a canonical form.
>

This needs to be documented quickly in the spec. I suspect that there
are many implementers out there who may miss this subtle detail.

- James

Received on Tuesday, 22 October 2013 16:45:59 UTC