Re: status of rfc6265bis?

On Mon, Feb 13, 2017 at 8:50 AM, Julian Reschke <>

> On 2017-02-13 17:23, Daniel Veditz wrote:
>> Currently all the major browser engines agree and return the quotes as
>> part of the cookie, which seems to be what the spec says (DQUOTEs are
>> part of the cookie value). Most servers seem to work fine with this
>> behavior and no one knows what will break if browsers start handling
>> this differently.
> That's how I read the spec as well; however, I failed to convince the main
> Apache HttpClient committer. Maybe there's something we can do to make it
> clearer.

That was also my intent when writing that passage.  See:


Received on Monday, 13 February 2017 19:06:08 UTC