Re: [http-state] Simple HTTP State Management

[Adam Barth <[e-mail]>]

On Sat, Jul 17, 2010 at 3:54 PM, Dave Kristol <[e-mail]> wrote:
> On 07/17/2010 05:22 PM, Adam Barth wrote:
>> It's good to see various folks sending in proposals for new HTTP state
>> management mechanisms.  I thought I would throw my hat in the ring
>> with some ideas I've been discussing with Andrew Bortz and others:
>>
>>
>> https://docs.google.com/document/pub?id=1l_YcZzF82OJdld5cJX38abSlIwG3dfW37gZTk6PDHwU
>>
>> I've also included the document inline below.  Let me know if you have
>> any feedback.
>
> That's pretty funny.  What goes around comes around.  In 1995 I proposed
> what I think may be a similar mechanism.  (See
> <http://kristol.org/cookie/session.txt> or .ps, if you prefer.)  It's
> mentioned in my ACM article, previously mentioned here
> (<http://arXiv.org/abs/cs.SE/0105018>).  When the state management sub-group
> started up, it was one of three proposals we considered, Netscape's cookies
> being one of the other two.

Great minds think alike?  :)

Some subtle differences:

1) State-Info looks to be chosen by the server instead of generated
randomly by the client.
2) State-Info looks to be scoped to an entire origin server instead of
divided by port and scheme.

Adam