Re: HttpOnly

> 1 - Cookies aren't included in RFC2616 at all.

> 2 - Hardly any implemenations of cookies follow any recent attempts to

>     document how cookies should be handled so I doubt writing yet
another

>     cookie spec update will help much.

Daniel, 

 

What about http://www.ietf.org/rfc/rfc2965 ?

 

 

 

 

 

Jim Manico, Senior Application Security Engineer

jim.manico@aspectsecurity.com <mailto:john.pavone@aspectsecurity.com> 

(301) 604-4882 (work) 

(808) 652-3805 (cell) 

 

Aspect Security(tm)

Securing your applications at the source
<http://aspectsecurity.com/about.html>  

http://www.aspectsecurity.com <http://www.aspectsecurity.com>