Re: [http-state] draft-ietf-httpstate-cookie-05 posted

Adam Barth <ietf@adambarth.com> Thu, 11 March 2010 18:06 UTC

Return-Path: <ietf@adambarth.com>
X-Original-To: http-state@core3.amsl.com
Delivered-To: http-state@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AD59B3A6C74 for <http-state@core3.amsl.com>; Thu, 11 Mar 2010 10:06:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.977
X-Spam-Level:
X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WZs5npvIQmY4 for <http-state@core3.amsl.com>; Thu, 11 Mar 2010 10:06:06 -0800 (PST)
Received: from mail-gy0-f172.google.com (mail-gy0-f172.google.com [209.85.160.172]) by core3.amsl.com (Postfix) with ESMTP id D5EE63A6E4F for <http-state@ietf.org>; Thu, 11 Mar 2010 09:43:10 -0800 (PST)
Received: by gyh4 with SMTP id 4so110218gyh.31 for <http-state@ietf.org>; Thu, 11 Mar 2010 09:43:12 -0800 (PST)
Received: by 10.101.160.22 with SMTP id m22mr4078981ano.183.1268329392658; Thu, 11 Mar 2010 09:43:12 -0800 (PST)
Received: from mail-iw0-f189.google.com (mail-iw0-f189.google.com [209.85.223.189]) by mx.google.com with ESMTPS id 23sm64089ywh.45.2010.03.11.09.43.11 (version=SSLv3 cipher=RC4-MD5); Thu, 11 Mar 2010 09:43:12 -0800 (PST)
Received: by iwn27 with SMTP id 27so334511iwn.5 for <http-state@ietf.org>; Thu, 11 Mar 2010 09:43:11 -0800 (PST)
MIME-Version: 1.0
Received: by 10.231.143.148 with SMTP id v20mr190979ibu.14.1268329391437; Thu, 11 Mar 2010 09:43:11 -0800 (PST)
In-Reply-To: <op.u9exs1lkvqd7e2@killashandra.oslo.osa>
References: <5c4444771003071050r3475798co95cc192d1f2e8190@mail.gmail.com> <op.u9dpzpdoqrq7tp@acorna> <5c4444771003101823u25842652o33b49b2be81f4cfc@mail.gmail.com> <op.u9exs1lkvqd7e2@killashandra.oslo.osa>
From: Adam Barth <ietf@adambarth.com>
Date: Thu, 11 Mar 2010 09:42:51 -0800
Message-ID: <5c4444771003110942n5b707bedoec7154ebf59cf43e@mail.gmail.com>
To: yngve@opera.com
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: http-state <http-state@ietf.org>
Subject: Re: [http-state] draft-ietf-httpstate-cookie-05 posted
X-BeenThere: http-state@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Discuss HTTP State Management Mechanism <http-state.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/http-state>, <mailto:http-state-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/http-state>
List-Post: <mailto:http-state@ietf.org>
List-Help: <mailto:http-state-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/http-state>, <mailto:http-state-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Mar 2010 18:06:06 -0000

On Thu, Mar 11, 2010 at 9:06 AM, Yngve Nysaeter Pettersen
<yngve@opera.com> wrote:
> On Thu, 11 Mar 2010 03:23:03 +0100, Adam Barth <ietf@adambarth.com> wrote:
>>> * 4.1 definition of Max-age is missing. It is used in 5.2.1
>>
>> This is intentional.  The folks in the working group didn't think we
>> should recommend Max-Age to server operators because it's not
>> implemented in Internet Explorer.  I'm optimistic that IE will
>> implement it, but that's why it's not there.
>
> I still think it should be there, perhaps with a note that not all clients
> support it (Opera didn't until a couple of years ago), and that servers
> should complement it with an Expires attribute.

Feel free to convince the working group on this point.  I support
describing it in Section 4.  It seems odd to leave out only one of the
attributes.

Adam