Re: Delete-Cookie header??

FWIW, I agree with Yoav and Martin. It also seems like this would be safe
to retrofit later if there's strong demand.

On Fri, Mar 21, 2025 at 4:59 PM Martin Thomson <mt@lowentropy.net> wrote:

>
>
> On Fri, Mar 21, 2025, at 23:49, Yoav Weiss wrote:
> > I don't necessarily see a use case for this (and the same effect can be
> > achieved by setting an expired cookie, right?)
> > So I'd prefer to keep things as simple as possible and not go that
> > route.
>
> I agree. The simplest design here deletes all cookies with a matching
> name. Limited, of course, to those that can be read/set.
>
> Sites that rely on path or domain to separate cookies of the same name -
> and want to delete some, but not all - won’t be able to do that. They will
> have to use Set-Cookie. That seems fine to me. We don’t have to define a
> solution that is perfectly general.
>
>