Re: Cookie crumbling

On Tue, 22 Oct 2013, Martin Thomson wrote:

> The order is canonical.
>
>       *  Cookies with longer paths are listed before cookies with
>          shorter paths.
>
>       *  Among cookies that have equal-length path fields, cookies with
>          earlier creation-times are listed before cookies with later
>          creation-times.
>
> It's trivially possible to recreate a canonical form.

No.

As Tatsuhiro pointed out, that information is not conveyed in that header sent 
from the client so the sort order is completely impossible for anyone else 
than the client to know. The paths and creation times could've been sent weeks 
ago.

So if you scramble the order, there's actually no way to put them back in the 
correct order.

-- 

  / daniel.haxx.se

Received on Tuesday, 22 October 2013 17:58:30 UTC