Re: [http-state] Is this an omission in the parser rules of draft-ietf-httpstate-cookie-21?

Adam Barth <ietf@adambarth.com> Fri, 04 February 2011 19:23 UTC

Return-Path: <ietf@adambarth.com>
X-Original-To: http-state@core3.amsl.com
Delivered-To: http-state@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BEBA83A6A1E for <http-state@core3.amsl.com>; Fri, 4 Feb 2011 11:23:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.198
X-Spam-Level:
X-Spam-Status: No, score=-3.198 tagged_above=-999 required=5 tests=[AWL=-1.221, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E6u46xUGSmVR for <http-state@core3.amsl.com>; Fri, 4 Feb 2011 11:23:36 -0800 (PST)
Received: from mail-vx0-f194.google.com (mail-vx0-f194.google.com [209.85.220.194]) by core3.amsl.com (Postfix) with ESMTP id 9EDF83A68FC for <http-state@ietf.org>; Fri, 4 Feb 2011 11:23:36 -0800 (PST)
Received: by vxc40 with SMTP id 40so36288vxc.1 for <http-state@ietf.org>; Fri, 04 Feb 2011 11:27:01 -0800 (PST)
Received: by 10.220.178.200 with SMTP id bn8mr676965vcb.169.1296843580953; Fri, 04 Feb 2011 10:19:40 -0800 (PST)
Received: from mail-vw0-f44.google.com (mail-vw0-f44.google.com [209.85.212.44]) by mx.google.com with ESMTPS id ft27sm753930vbb.8.2011.02.04.10.19.39 (version=SSLv3 cipher=RC4-MD5); Fri, 04 Feb 2011 10:19:39 -0800 (PST)
Received: by vws7 with SMTP id 7so1747727vws.31 for <http-state@ietf.org>; Fri, 04 Feb 2011 10:19:38 -0800 (PST)
Received: by 10.220.185.21 with SMTP id cm21mr750636vcb.213.1296843578203; Fri, 04 Feb 2011 10:19:38 -0800 (PST)
MIME-Version: 1.0
Received: by 10.220.165.212 with HTTP; Fri, 4 Feb 2011 10:19:07 -0800 (PST)
In-Reply-To: <20110204181417.18637.qmail@mm02.prod.mesa1.secureserver.net>
References: <20110204181417.18637.qmail@mm02.prod.mesa1.secureserver.net>
From: Adam Barth <ietf@adambarth.com>
Date: Fri, 4 Feb 2011 10:19:07 -0800
Message-ID: <AANLkTindWkSmYYyJQ48Uj4ugc6mQ9FyZc61ZQ+CsFARp@mail.gmail.com>
To: Remy Lebeau <remy@lebeausoftware.org>
Content-Type: text/plain; charset=ISO-8859-1
Cc: http-state@ietf.org
Subject: Re: [http-state] Is this an omission in the parser rules of draft-ietf-httpstate-cookie-21?
X-BeenThere: http-state@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Discuss HTTP State Management Mechanism <http-state.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/http-state>, <mailto:http-state-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/http-state>
List-Post: <mailto:http-state@ietf.org>
List-Help: <mailto:http-state-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/http-state>, <mailto:http-state-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Feb 2011 19:23:37 -0000

On Fri, Feb 4, 2011 at 10:14 AM, Remy Lebeau <remy@lebeausoftware.org>; wrote:
> -------- Original Message --------
> Subject: Re: [http-state] Is this an omission in the parser rules of
> draft-ietf-httpstate-cookie-21?
> From: Adam Barth
> Date: Thu, February 03, 2011 7:25 pm
> To: Remy Lebeau
> Cc: http-state@ietf.org
>
>> Are you implementing a user agent or a server?
>
> Both, actually. I work on an open-source library, Indy
> (http://www.indyproject.org), which implements a lot of Internet
> protocols, including both http client and server components.
>
> My main concern is that while not common, I have seen RFC 2109 cookies
> in the wild before, quoted cookie-av values and all. Since the draft
> tries to allow for "maximum interoperability", it should allow for user
> agents to parse RFC 2109 formatted cookies from servers.

The draft gives user agents precise instructions for how to parse all
manner of cookies, including cookies with values that contain quote
characters.  That information is contained in Section 5 and is
entirely unrelated to the grammar you're referring to, which is
contained in Section 4.

Kind regards,
Adam