Re: [http-state] draft-ietf-httpstate-cookie-05 posted

Daniel Stenberg <daniel@haxx.se> Mon, 15 March 2010 23:30 UTC

Return-Path: <daniel@haxx.se>
X-Original-To: http-state@core3.amsl.com
Delivered-To: http-state@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 31D5F3A6C01 for <http-state@core3.amsl.com>; Mon, 15 Mar 2010 16:30:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.249
X-Spam-Level:
X-Spam-Status: No, score=-2.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_SE=0.35]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zAh2DAYfYJAo for <http-state@core3.amsl.com>; Mon, 15 Mar 2010 16:30:00 -0700 (PDT)
Received: from giant.haxx.se (giant.haxx.se [83.168.254.42]) by core3.amsl.com (Postfix) with ESMTP id 0CE8D3A6C00 for <http-state@ietf.org>; Mon, 15 Mar 2010 16:29:59 -0700 (PDT)
Received: from giant.haxx.se (giant.haxx.se [83.168.254.42]) by giant.haxx.se (8.14.3/8.14.3/Debian-9) with ESMTP id o2FNTvL7011368; Tue, 16 Mar 2010 00:29:57 +0100
Date: Tue, 16 Mar 2010 00:29:57 +0100
From: Daniel Stenberg <daniel@haxx.se>
X-X-Sender: dast@giant.haxx.se
To: "Paul E. Jones" <paulej@packetizer.com>
In-Reply-To: <00a601cac496$2be978a0$83bc69e0$@com>
Message-ID: <alpine.DEB.2.00.1003160023200.1644@tvnag.unkk.fr>
References: <5c4444771003071050r3475798co95cc192d1f2e8190@mail.gmail.com> <op.u9dpzpdoqrq7tp@acorna> <5c4444771003101823u25842652o33b49b2be81f4cfc@mail.gmail.com> <alpine.DEB.2.00.1003112201360.25452@tvnag.unkk.fr> <op.u9feulgkqrq7tp@acorna> <009401cac476$eb8c83c0$c2a58b40$@com> <5c4444771003151240h61a87c3fp9a1649d1163111ce@mail.gmail.com> <009a01cac489$47f0fda0$d7d2f8e0$@com> <alpine.DEB.2.00.1003152251531.27391@tvnag.unkk.fr> <00a601cac496$2be978a0$83bc69e0$@com>
User-Agent: Alpine 2.00 (DEB 1167 2008-08-23)
X-fromdanielhimself: yes
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"; format="flowed"
Cc: 'http-state' <http-state@ietf.org>
Subject: Re: [http-state] draft-ietf-httpstate-cookie-05 posted
X-BeenThere: http-state@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Discuss HTTP State Management Mechanism <http-state.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/http-state>, <mailto:http-state-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/http-state>
List-Post: <mailto:http-state@ietf.org>
List-Help: <mailto:http-state-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/http-state>, <mailto:http-state-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Mar 2010 23:30:02 -0000

On Mon, 15 Mar 2010, Paul E. Jones wrote:

> there are only a small handful of browsers that need to handle those 
> cookies.

I'm claiming that statement is wrong.

Cookies are handled client-side by HTTP clients that handle cookies. There are 
far more such client implementations in wide use than "just" the major 
browsers, like for example the library I myself work with: libcurl. But there 
are a large number of other implementations of tools and libraries handling 
cookies that are used out there.

Most probably not at all as many as the server-side apps creating the cookies, 
but certainly not limited to "a small handful of browsers".

-- 

  / daniel.haxx.se