Re: I-D Action: draft-ietf-httpbis-layered-cookies-01.txt

Ok, thanks for the clarification.

Rory Hewitt

http://www.linkedin.com/in/roryhewitt

On Thu, Nov 20, 2025, 5:09 PM Mark Nottingham <mnot@mnot.net> wrote:

> Hi Rory,
>
> 6265bis is just going into the RFC Editor queue, and layered-cookies is
> the next revision after that -- it's effectively a refactoring (something
> we considered during 6265bis but wanted to separate out).
>
> Cheers,
>
>
> > On 21 Nov 2025, at 11:41 am, Rory Hewitt <rory.hewitt@gmail.com> wrote:
> >
> > Maybe I'm confused, but what is the relationship, if any, between
> "draft-ietf-httpbis-layered-cookies-01" (this I-D) and
> "draft-ietf-httpbis-rfc6265bis" (the draft put forward by Steve Bingler and
> others)?
> >
> > They're both updates to RFC6365 "Cookies: HTTP State Management
> Mechanism" RFC, correct? So what's the reason for having two separate I-Ds
> at the same time?
> >
> > On Tue, Nov 18, 2025 at 5:26 AM <internet-drafts@ietf.org> wrote:
> > Internet-Draft draft-ietf-httpbis-layered-cookies-01.txt is now
> available. It
> > is a work item of the HTTP (HTTPBIS) WG of the IETF.
> >
> >    Title:   Cookies: HTTP State Management Mechanism
> >    Authors: Anne van Kesteren
> >             Johann Hofmann
> >    Name:    draft-ietf-httpbis-layered-cookies-01.txt
> >    Pages:   46
> >    Dates:   2025-11-18
> >
> > Abstract:
> >
> >    This document defines the HTTP Cookie and Set-Cookie header fields.
> >    These header fields can be used by HTTP servers to store state
> >    (called cookies) at HTTP user agents, letting the servers maintain a
> >    stateful session over the mostly stateless HTTP protocol.  Although
> >    cookies have many historical infelicities that degrade their security
> >    and privacy, the Cookie and Set-Cookie header fields are widely used
> >    on the Internet.  This document obsoletes RFC 6265 and 6265bis.
> >
> > The IETF datatracker status page for this Internet-Draft is:
> > https://datatracker.ietf.org/doc/draft-ietf-httpbis-layered-cookies/
> >
> > There is also an HTML version available at:
> >
> https://www.ietf.org/archive/id/draft-ietf-httpbis-layered-cookies-01.html
> >
> > A diff from the previous version is available at:
> >
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-httpbis-layered-cookies-01
> >
> > Internet-Drafts are also available by rsync at:
> > rsync.ietf.org::internet-drafts
> >
> >
> >
> >
> >
> > --
> > Rory Hewitt
> >
> > https://www.linkedin.com/in/roryhewitt
>
> --
> Mark Nottingham   https://www.mnot.net/
>
>