Re: Delete-Cookie header??

On Thu, Oct 31, 2024 at 11:45 AM Daniel Stenberg <daniel@haxx.se> wrote:

> On Thu, 31 Oct 2024, Yoav Weiss wrote:
>
> > That's true. At the same time, the use case at hand is one where we want
> to
> > delete cookies when we have no knowledge of their path. So I believe
> it's
> > fine to delete all matching cookies.
>
> Sure, as that's the case you've identified. But it is not hard to imagine
> a
> case where you know that you have a 'name1' cookie used under a number of
> paths and specific domains, but you also have an abandoned such cookie
> under
> other paths/domains.
>
> I'm just highlighting a limitation, I don't know of it's important enough
> to
> matter.
>
> Which domain would these cookies need to match to get removed?
>

Similarly in my use case, I have no knowledge of the domain, so the answer
is all of them :)

But I see your point, and we may want an optional way to define
paths/domains to which the removal is applicable.
It'd be good to have folks voice a use case for that before paying up the
added complexity involved.


>
> --
>
>   / daniel.haxx.se
>