Re: [http-state] Make draft-abarth-cookie-06 a working group item?

[Dan Winship <[e-mail]>]

On 12/11/2009 06:48 PM, Daniel Stenberg wrote:
> Max-age is now specified to be:
> 
>       The value of the Max-Age attribute represents the maximum
>       lifetime of the cookie, measured in seconds from the moment the
>       user agent receives the cookie
> 
> RFC2109 and 2965 that both include max-age defined Max-age to be:
> 
>       The Max-Age attribute defines the lifetime of the cookie, in seconds.
> 
> ... with no mention of exactly when the cookie's birth is. I figure we
> can define it to be since the receive moment for convenience if nothing
> else. Counting from the sending moment would be hard, even if I bet most
> server side implementations basically assumes it is from the moment they
> send the cookie.

For the "max-age" Cache-Control directive, you count from the time in
the Date header. We could do the same (though we need to put something
about what to do if there's no Date header).

-- Dan