Re: _HttpOnly cookie prefix?

On Mon, Feb 24, 2025 at 11:36 AM Yoav Weiss <yoav.weiss@shopify.com> wrote:

> Oh yeah! I'd need to also add steps to
> https://www.ietf.org/archive/id/draft-ietf-httpbis-rfc6265bis-19.html#section-5.7
> to impact the consumer processing models.
>

Took a stab at that:
https://yoavweiss.github.io/httponly_prefix/draft-httponlyprefix-weiss-http.html#name-storage-model

Feedback appreciated! :)


>
> On Mon, Feb 24, 2025 at 11:26 AM Anne van Kesteren <annevk@annevk.nl>
> wrote:
>
>> On Mon, Feb 24, 2025 at 11:05 AM Yoav Weiss <yoav.weiss@shopify.com>
>> wrote:
>> > I've put together an I-D to propose this more officially. I'd love
>> feedback on it.
>>
>> This only covers requirements for producers. Consumers will have to
>> perform ASCII case-insensitive matching, for instance.
>>
>

Received on Monday, 24 February 2025 10:58:16 UTC