Re: [http-state] Minor things concerning draft-ietf-httpstate-cookie-01

[Adam Barth <[e-mail]>]

On Tue, Jan 12, 2010 at 2:02 AM, Georg Koppen <[e-mail]> wrote:
> 1) Section 4.1.2.2.: "For example, if the domain attribute contains"
> should be "For example, if the Domain attribute contains".

Fixed.

> 2) The same section: "Note that a leading U+2E (".")" should be "Note
> that a leading U+002E (".")"

Fixed.

> 3) The same section: "the user agent will return the cookie only to the
> origin server" should be "the user agent will return the cookie only to
> the origin server."

Fixed.

> 4) Section 4.2.1.: "a Cookie header that conforms to the following
> grammar." should be "a Cookie header that conforms to the following
> grammar:"

Fixed.

> 5) Section 5 says that there are some algorithms specified for some
> tasks concerning the cookie protocol but the user agents do not have to
> follow these ("user agents are free to implement the cookie
> protocol..."). But, for instance in Section 5.1.1., there it says "The
> user agent MUST use the following algorithm..." Thus, am I free to
> implement it differently or not? It's a bit confusing...

The operative requirement is:

      <t>Although some parts of the cookie protocol are specified
      algorithmically, user agents are free to implement the cookie protocol
      in any manner as long as their resultant behavior is "black-box"
      indistinguishable from a user agent that implements the protocol as
      described.</t>

Is there some way we can be clearer that user agents are free to
implement the protocol however they like?  This might be a slight
cultural divide.  Many user agent specifications are written in this
way.

> 6) Section 5.2.: Point 2.: "Otherwise: The name-value-pair string
> consists of all the character" should be: "Otherwise: The
> name-value-pair string consists of all the characters"

Fixed.

> 7) Section 7.1.: "In addition to encrypting and signing the the
> contents" Well, one "the" should be enough, shouldn't it. ;-)

Already fixed.

Thanks for your careful reading!

Adam