new cookie draft from Dave Kristol on 1997-03-20 (ietf-http-wg@w3.org from January to March 1997)

From: Dave Kristol <dmk@research.bell-labs.com>
Date: Thu, 20 Mar 97 10:37:49 EST
To: http-wg@cuckoo.hpl.hp.com
Message-Id: <9703201537.AA13888@zp>

Well, sports fans, there's a new cookie draft.  Regrettably, the name
is draft-ietf-http-state-man-mec-00.  (I had wanted it to be
draft-ietf-http-state-mgmt-06.) I have withdrawn
draft-ietf-http-state-mgmt-errata-00, which the new draft subsumes.

For the record, I know of two planned changes to the draft already:

1) I'll drop the "same port" requirement.  (Cookies can return to any
port on any host to which they could otherwise legitimately be sent.)

2) [10.1.1] When a user agent receives both Set-Cookie and Set-Cookie2,
if the Set-Cookie2 has no Max-Age attribute, the user agent *must not*
[change from "may"] honor any Expires in Set-Cookie.

Dave Kristol

Received on Thursday, 20 March 1997 07:40:12 UTC