Re: [http-state] Support of nameless cookies by user agents

Adam Barth <ietf@adambarth.com> Wed, 16 December 2009 07:15 UTC

Return-Path: <adam@adambarth.com>
X-Original-To: http-state@core3.amsl.com
Delivered-To: http-state@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3396E3A6927 for <http-state@core3.amsl.com>; Tue, 15 Dec 2009 23:15:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.967
X-Spam-Level:
X-Spam-Status: No, score=-1.967 tagged_above=-999 required=5 tests=[AWL=0.010, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DWCyfnylj0ws for <http-state@core3.amsl.com>; Tue, 15 Dec 2009 23:15:54 -0800 (PST)
Received: from mail-pw0-f50.google.com (mail-pw0-f50.google.com [209.85.160.50]) by core3.amsl.com (Postfix) with ESMTP id BF1D33A68B3 for <http-state@ietf.org>; Tue, 15 Dec 2009 23:15:54 -0800 (PST)
Received: by pwi20 with SMTP id 20so498072pwi.29 for <http-state@ietf.org>; Tue, 15 Dec 2009 23:15:31 -0800 (PST)
MIME-Version: 1.0
Received: by 10.143.24.42 with SMTP id b42mr461059wfj.41.1260947731301; Tue, 15 Dec 2009 23:15:31 -0800 (PST)
In-Reply-To: <9B4613BE-C07E-4B61-A4D8-2B81D7D9D07E@apple.com>
References: <7789133a0912152234w3d00f382t5bd22aab97abbb4@mail.gmail.com> <677B2D59-5B68-4D8B-978A-F6FE7A834C75@apple.com> <9B4613BE-C07E-4B61-A4D8-2B81D7D9D07E@apple.com>
From: Adam Barth <ietf@adambarth.com>
Date: Tue, 15 Dec 2009 23:15:11 -0800
Message-ID: <7789133a0912152315k676ba194t9716a4c3ebc223c9@mail.gmail.com>
To: Maciej Stachowiak <mjs@apple.com>
Content-Type: text/plain; charset="ISO-8859-1"
Cc: "Roy T. Fielding" <fielding@gbiv.com>, http-state <http-state@ietf.org>
Subject: Re: [http-state] Support of nameless cookies by user agents
X-BeenThere: http-state@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Discuss HTTP State Management Mechanism <http-state.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/http-state>, <mailto:http-state-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/http-state>
List-Post: <mailto:http-state@ietf.org>
List-Help: <mailto:http-state-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/http-state>, <mailto:http-state-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Dec 2009 07:15:56 -0000

On Tue, Dec 15, 2009 at 10:58 PM, Maciej Stachowiak <mjs@apple.com> wrote:
> Side note: here is the bug where we added support for cookies without an =
> sign, implementing them as valueless rather than nameless, working around
> the lower level library:
>
> https://bugs.webkit.org/show_bug.cgi?id=6531
>
> The nature of the workaround means that cookies with no equal sign are only
> supported in script, not on the wire, but if you set one in script it will
> get sent in outgoing Cookie headers.

If you'd like to improve compatibility with IE and Firefox, you might
consider representing these as nameless cookies instead of valueless
cookie.  You can observe the difference via test 0027:

Set-Cookie: foo
Set-Cookie: bar

> We have an internal bug to track adding support at the protocol level.
>
> I was not able to find a bug (either in the bug system or internal) that
> could be readily identified as needing nameless cookies to be treated
> nameless instead of valueless. However, it is possible we have a site
> compatibility bug that is in fact about that issue, but no one has yet
> diagnosed it.
>
> Regards,
> Maciej