[thelist] CF: cookie versus cflocation?!?

[Oliver Lineham]

At 22:28 23/09/00 -0400, you wrote:

> From what I understand, you are not supposed to send cookies in redirection
>headers. It is technically possible, and done in most other languages, but
>CF decided to follow the rules and don't allow cookies to be set during a
>CFLOCATION.  It has been that way since CFLOCATION and CFCOOKIE were
>introduced, and truly is a pain in the ass.

Does anyone know of any browsers that reject cookies in redirects?

If there is, it might be worth avoiding it in other languages too.

>As an aside, I used to have the link to the spec that said no cookies in 302
>headers ( or 301 I think?), but standards no one follows don't really
>matter.

I have the "HTTP state mechanism" RFC here somewhere.

>I have a standard that says everybody that comes to my house has to
>bring beer, but so few people follow it.  And hardly anyone knows it is a
>standard. sigh.

Life's a bitch :)

</ol>

____________________________________________________
     v i b e   m e d i a    http://www.vibe.co.nz/
  po box 10-492              wellington, new zealand
  phone +64 21 210-7845         oliver at lineham.co.nz