Re: [http-state] I-D Action:draft-ietf-httpstate-cookie-03.txt

Simple question about the *dates" in this draft:

1) If I understand 5.1.1. Dates correctly, the format of the date is
   fixed and must be in GMT.
   IIRC the date format in RFC2616 allows more variants. Also the timezone
   may be different to GMT (see RFC2616, 19.3).

   So the definitions in this draft would brake old behaviours.
   (Though, from a security point of view, I'd prefer the draft definition:)

2) In 4.1.2. Semantics (third paragraph) we read:
	" .. by including an Expires attribute with a value in the past."
   This is a bit missleading unless all date formats are GMT (see 1) above).

Achim

> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the HTTP State Management Mechanism Working Group of the IETF.
> 
> 
> 	Title           : HTTP State Management Mechanism
> 	Author(s)       : A. Barth
> 	Filename        : draft-ietf-httpstate-cookie-03.txt
> 	Pages           : 29
> 	Date            : 2010-02-12
> 
> This document defines the HTTP Cookie and Set-Cookie headers.  These
> headers can be used by HTTP servers to store state on HTTP user
> agents, letting the servers maintain a stateful session over the
> mostly stateless HTTP protocol.  The cookie protocol has many
> historical infelicities and should be avoided for new applications of
> HTTP.
> 
> 
> NOTE: If you have suggestions for improving the draft, please send
> 
> email to http-state@ietf.org.  Suggestions with test cases are
> 
> especially appreciated.
> 
> A URL for this Internet-Draft is:
> http://www.ietf.org/internet-drafts/draft-ietf-httpstate-cookie-03.txt
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> Below is the data which will enable a MIME compliant mail reader
> implementation to automatically retrieve the ASCII version of the
> Internet-Draft.
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> http-state mailing list
> http-state@ietf.org
> https://www.ietf.org/mailman/listinfo/http-state