Re: [http-state] IETF-wide Last Call for -httpstate-cookie-10 ?

=JeffH <Jeff.Hodges@KingsMountain.com> Wed, 01 September 2010 20:55 UTC

Return-Path: <Jeff.Hodges@KingsMountain.com>
X-Original-To: http-state@core3.amsl.com
Delivered-To: http-state@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6CCE23A689F for <http-state@core3.amsl.com>; Wed, 1 Sep 2010 13:55:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.743
X-Spam-Level:
X-Spam-Status: No, score=-101.743 tagged_above=-999 required=5 tests=[AWL=-0.078, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, J_CHICKENPOX_73=0.6, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id McWN9S04SFam for <http-state@core3.amsl.com>; Wed, 1 Sep 2010 13:55:23 -0700 (PDT)
Received: from cpoproxy2-pub.bluehost.com (cpoproxy2-pub.bluehost.com [67.222.39.38]) by core3.amsl.com (Postfix) with SMTP id 68FFF3A6846 for <http-state@ietf.org>; Wed, 1 Sep 2010 13:55:21 -0700 (PDT)
Received: (qmail 9647 invoked by uid 0); 1 Sep 2010 20:55:39 -0000
Received: from unknown (HELO box514.bluehost.com) (74.220.219.114) by cpoproxy2.bluehost.com with SMTP; 1 Sep 2010 20:55:39 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=kingsmountain.com; h=Received:Message-ID:Date:From:User-Agent:MIME-Version:To:Subject:Content-Type:Content-Transfer-Encoding:X-Identified-User; b=swRUpar+zflzhuxOTqIRdAYuDTCo01taE0+saKoLa3dy15WvIXr4lnQY/DJJuIzEP5NdcLKyA23aqk859YRaafuZkC3W2VCSjihXI1yD4uTswxkpO6fOXIivYLvuiBUj;
Received: from outbound4.ebay.com ([216.113.168.128] helo=[10.244.48.205]) by box514.bluehost.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.69) (envelope-from <Jeff.Hodges@KingsMountain.com>) id 1OquLK-00027y-Jz for http-state@ietf.org; Wed, 01 Sep 2010 14:55:39 -0600
Message-ID: <4C7EBDCA.7060003@KingsMountain.com>
Date: Wed, 01 Sep 2010 13:55:38 -0700
From: =JeffH <Jeff.Hodges@KingsMountain.com>
User-Agent: Thunderbird 2.0.0.24 (X11/20100411)
MIME-Version: 1.0
To: HTTP-state mailing list <http-state@ietf.org>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-Identified-User: {11025:box514.bluehost.com:kingsmou:kingsmountain.com} {sentby:smtp auth 216.113.168.128 authed with jeff.hodges+kingsmountain.com}
Subject: Re: [http-state] IETF-wide Last Call for -httpstate-cookie-10 ?
X-BeenThere: http-state@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Discuss HTTP State Management Mechanism <http-state.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/http-state>, <mailto:http-state-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/http-state>
List-Post: <mailto:http-state@ietf.org>
List-Help: <mailto:http-state-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/http-state>, <mailto:http-state-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Sep 2010 20:55:27 -0000

 > I setup a little CGI that can be used to check what your browser thinks:
 >
 >  	http://daniel.haxx.se/cookie.cgi
 >
 > It sends a single cookie header that looks like:
 >
 >  	"Set-Cookie: testme=yesyes; expires=Wed Sep  1 22:01:55 69;"
 >
 > The script prints the Cookie: headers, so if you reload you should see
 > "testme=yesyes" being output if the cookie is still there. If the cookie is
 > still there, your browser of choice treats the date above as a date in the
 > future.

thanks for doing that.


 >    curl (2147483647 seconds)

huh, my calcs indicate 2147483647 (sec) ~= 68 (yr)  ?     If that then is 
treated as "future", yet something else is going on (in curl) ?


 > Most clients seem to agree that '69' refers to '2069'.

Ok, so the issue with the spec AFAICT is not /just/ with year tokens of '69', 
but with these two rules from section 5.1.1. "Dates"...

    3.  If the year-value is greater than 68 and less than 100, increment
        the year-value by 1900.

    4.  If the year-value is greater than or equal to 0 and less than 69,
        increment the year-value by 2000.


might you be able to tweak your .cgi script to test all year values from 0 <= 
year <= 100 such that we can see in detail what all happens to which year values?

thanks,

=JeffH