I-D Action: draft-ietf-httpbis-cookie-alone-00.txt
internet-drafts@ietf.org Tue, 23 February 2016 09:42 UTC
Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48B041B3FCA for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 23 Feb 2016 01:42:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.908
X-Spam-Level:
X-Spam-Status: No, score=-6.908 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.006, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RDQbqf3G2B_d for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 23 Feb 2016 01:42:25 -0800 (PST)
Received: from frink.w3.org (frink.w3.org [128.30.52.56]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 690661B3ED4 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Tue, 23 Feb 2016 01:42:25 -0800 (PST)
Received: from lists by frink.w3.org with local (Exim 4.80) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1aY9Qs-0000WM-Ia for ietf-http-wg-dist@listhub.w3.org; Tue, 23 Feb 2016 09:39:02 +0000
Resent-Date: Tue, 23 Feb 2016 09:39:02 +0000
Resent-Message-Id: <E1aY9Qs-0000WM-Ia@frink.w3.org>
Received: from maggie.w3.org ([128.30.52.39]) by frink.w3.org with esmtps (TLS1.2:DHE_RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from <internet-drafts@ietf.org>) id 1aY9Qo-0000VN-NN for ietf-http-wg@listhub.w3.org; Tue, 23 Feb 2016 09:38:58 +0000
Received: from mail.ietf.org ([4.31.198.44]) by maggie.w3.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from <internet-drafts@ietf.org>) id 1aY9Qm-0007Fr-Hy for ietf-http-wg@w3.org; Tue, 23 Feb 2016 09:38:58 +0000
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E8C5D1B4058; Tue, 23 Feb 2016 01:38:29 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Cc: ietf-http-wg@w3.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.14.1
Auto-Submitted: auto-generated
Message-ID: <20160223093829.28424.17396.idtracker@ietfa.amsl.com>
Date: Tue, 23 Feb 2016 01:38:29 -0800
Received-SPF: pass client-ip=4.31.198.44; envelope-from=internet-drafts@ietf.org; helo=mail.ietf.org
X-W3C-Hub-Spam-Status: No, score=-7.6
X-W3C-Hub-Spam-Report: AWL=1.333, BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, W3C_AA=-1, W3C_WL=-1
X-W3C-Scan-Sig: maggie.w3.org 1aY9Qm-0007Fr-Hy f0bfe9c81fe309afdc9fc4bfda12083f
X-Original-To: ietf-http-wg@w3.org
Subject: I-D Action: draft-ietf-httpbis-cookie-alone-00.txt
Archived-At: <http://www.w3.org/mid/20160223093829.28424.17396.idtracker@ietfa.amsl.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/31092
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>
A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Hypertext Transfer Protocol of the IETF.
Title : Deprecate modification of 'secure' cookies from non-secure origins
Author : Mike West
Filename : draft-ietf-httpbis-cookie-alone-00.txt
Pages : 5
Date : 2016-02-23
Abstract:
This document updates RFC6265 by removing the ability for a non-
secure origin to set cookies with a 'secure' flag, and to overwrite
cookies whose 'secure' flag is set. This deprecation improves the
isolation between HTTP and HTTPS origins, and reduces the risk of
malicious interference.
The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-httpbis-cookie-alone/
There's also a htmlized version available at:
https://tools.ietf.org/html/draft-ietf-httpbis-cookie-alone-00
Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.
Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/
- I-D Action: draft-ietf-httpbis-cookie-alone-00.txt internet-drafts