Re: Delete-Cookie header??

On Mon, Feb 24, 2025 at 11:17 AM Anne van Kesteren <annevk@annevk.nl> wrote:

>
> On 24. Feb 2025, at 9:33 AM, Yoav Weiss <yoav.weiss@shopify.com> wrote:
>
> I (belatedly) whipped together an I-D for this:
> https://yoavweiss.github.io/delete-cookie/draft-deletecookie-weiss-http.html
>
>
> One aspect the draft does not go into is that the value space of a cookie
> name is wider than SFV token.
>

Interesting! Is that because a `Set-Cookie` takes in an HTTP token
<https://www.rfc-editor.org/rfc/rfc9110#section-5.6.2> as its name?

In particular when we look at the cookies that can be created, not just
> those servers should create. E.g., a cookie can be named <blah> (including
> the angle brackets), but you cannot delete that cookie with this proposal.
>