RFC6265bis: Mention considering domain a-v length when sorting the cookie-list

[miketaylr]

Step 2 of https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-07#section-5.5 says:

2. The user agent SHOULD sort the cookie-list in the following
   order:

   *  Cookies with longer paths are listed before cookies with
      shorter paths.

   *  Among cookies that have equal-length path fields, cookies with
      earlier creation-times are listed before cookies with later
      creation-times.

   NOTE: Not all user agents sort the cookie-list in this order, but
   this order reflects common practice when this document was
   written, and, historically, there have been servers that
   (erroneously) depended on this order.

This is accurate, but domain is also taken into account. We should update the draft to reflect that.

I can write a patch.

[miketaylr]

OK, I did more testing. This isn't true.