Re: [http-state] Updated draft

Dan Winship <dan.winship@gmail.com> Mon, 17 August 2009 23:15 UTC

Return-Path: <dan.winship@gmail.com>
X-Original-To: http-state@core3.amsl.com
Delivered-To: http-state@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 783BB3A6D90 for <http-state@core3.amsl.com>; Mon, 17 Aug 2009 16:15:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.913
X-Spam-Level:
X-Spam-Status: No, score=-2.913 tagged_above=-999 required=5 tests=[AWL=-0.648, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rNO9SXiOA7Bl for <http-state@core3.amsl.com>; Mon, 17 Aug 2009 16:15:57 -0700 (PDT)
Received: from mysterion.org (mysterion.org [69.25.196.35]) by core3.amsl.com (Postfix) with ESMTP id B26023A684A for <http-state@ietf.org>; Mon, 17 Aug 2009 16:15:57 -0700 (PDT)
Received: from desktop.home.mysterion.org (c-76-97-71-164.hsd1.ga.comcast.net [76.97.71.164]) by mysterion.org (Postfix) with ESMTPA id BD7C5802AE; Mon, 17 Aug 2009 19:15:57 -0400 (EDT)
Message-ID: <4A89E4AA.4040204@gmail.com>
Date: Mon, 17 Aug 2009 19:15:54 -0400
From: Dan Winship <dan.winship@gmail.com>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.1) Gecko/20090814 Fedora/3.0-2.6.b3.fc11 Thunderbird/3.0b3
MIME-Version: 1.0
To: Daniel Stenberg <daniel@haxx.se>
References: <7789133a0908151008p35ff30e6w2761368fe70d41a6@mail.gmail.com> <4A889417.9020709@gmail.com> <alpine.DEB.2.00.0908170929100.22132@yvahk2.pbagnpgbe.fr> <7789133a0908170853r5a81b84cu1308049256f51d2c@mail.gmail.com> <7789133a0908170908r4e3e8d30v7187bbf67f76b95c@mail.gmail.com> <4A8996DE.4030905@gmx.de> <7789133a0908171152q5cdd97beia9e4034148e63e0e@mail.gmail.com> <4A89B35C.6010601@gmx.de> <op.uytnzlkm64w2qv@anne-van-kesterens-macbook.local> <4A89B4CD.9010708@gmx.de> <7789133a0908171325i4c908530k43d317a4c777b10@mail.gmail.com> <alpine.DEB.2.00.0908172227340.16209@yvahk2.pbagnpgbe.fr>
In-Reply-To: <alpine.DEB.2.00.0908172227340.16209@yvahk2.pbagnpgbe.fr>
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Cc: http-state <http-state@ietf.org>
Subject: Re: [http-state] Updated draft
X-BeenThere: http-state@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Discuss HTTP State Management Mechanism <http-state.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/http-state>, <mailto:http-state-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/http-state>
List-Post: <mailto:http-state@ietf.org>
List-Help: <mailto:http-state-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/http-state>, <mailto:http-state-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 17 Aug 2009 23:15:58 -0000

On 08/17/2009 05:19 PM, Daniel Stenberg wrote:
> I've browsed the Cookie: code for curl, wget, libsoup, pavuk, lftp and
> aria2. If I didn't miss anything, none of these cookie implementations
> sort the cookies as the browsers.

You missed this in soup-cookie-jar.c:

	/* FIXME: sort? */

Adam's explanation of cookie sorting is *exactly* the sort of
information I was hoping to get out of this group. Our goal (as I
understand it) is to document the facts of cookies in the real world.
It's a fact that all major browsers sort cookies the same way. It's a
fact that some web sites depend on this. So we document it, and I get to
remove a FIXME, and WebKitGtk works with a few more sites than it used to.

Be liberal in what you accept (clients MUST accept all date formats,
servers MUST accept cookies in any order) and conservative in what you
send (clients MUST send cookies in the recommended order, servers MUST
send dates in the recommended format).

-- Dan