Re: Accomodating Netscape-style cookies?

Kartik Subbarao (subbarao@computer.org)
Sat, 21 Mar 1998 21:57:02 -0500


Liam Quinn wrote:

> At 04:27 PM 15/03/98 -0500, Kartik Subbarao wrote:
> >Here's some more information from the Netscape spec that talks about when
> >it will accept cookies:
> >
> >---
> >Only hosts within the specified domain can set a cookie for a domain and
> >domains must have at least two (2) or three (3) periods in them to prevent
> >domains of the form: ".com", ".edu", and "va.us". Any domain that fails
> >within one of the seven special top level domains listed below only require
> >two periods. Any other domain requires at least three. The seven special
> >top level domains are: "COM", "EDU", "NET", "ORG", "GOV", "MIL", and "INT".
> >
> >---
>
> Does Netscape really not allow a cookie to be set for ".corel.ca"?  That
> spec says that at least three periods are required for .ca domains.
>

I tested setting a cookie from www.foo.ca for domain=.foo.ca, and Netscape 4.04
accepted it. Out of curiosity, I also tried www.foo.qux for domain=.foo.qux
(definitely a nonexistent domain), and it also worked! But it did not allow
setting a cookie for domain=.ca. So maybe Netscape relaxed the three period
rule to two periods.

    -Kartik