Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RFC6265bis: Add note not to send invalid cookies due to PSL changes #2215

Merged
merged 5 commits into from
Jul 11, 2022

Conversation

sbingler
Copy link
Collaborator

@sbingler sbingler commented Jul 7, 2022

Closes #1418

This adds a note clarifying that cookies whose domain was added to the PSL should not be sent even if they domain match the URI's host.

For example.
Set-Cookie: foo=bar; Domain=example.com
If example.com is added to the PSL then foo should not be sent to sub.example.com nor example.com

@sbingler sbingler marked this pull request as ready for review July 7, 2022 19:42
draft-ietf-httpbis-rfc6265bis.md Outdated Show resolved Hide resolved
draft-ietf-httpbis-rfc6265bis.md Outdated Show resolved Hide resolved
@mikewest mikewest merged commit f282ffd into httpwg:main Jul 11, 2022
@sbingler sbingler deleted the Issue1418 branch July 11, 2022 16:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

RFC 6265bis does not specify what happens when an existing cookie is no longer valid
3 participants