[10598] in www-talk@info.cern.ch
Re: errata for cookie spec
daemon@ATHENA.MIT.EDU (Koen Holtman)
Fri Feb 7 03:52:28 1997
From: koen@win.tue.nl (Koen Holtman)
To: ruby@name.net (Matthew Rubenstein)
Date: Fri, 7 Feb 1997 09:38:57 +0100 (MET)
Cc: jeremey@veriweb.com, www-talk@w3.org
In-Reply-To: <2.2.32.19970206233931.008b9e90@mail.name.net> from "Matthew Rubenstein" at Feb 6, 97 06:39:31 pm
Resent-From: www-talk@w3.org
Matthew Rubenstein:
[...]
> Domains' cookies should be partitioned from one another. However,
>preventing a domain from sending its cookie to another domain's server for
>parsing only forces the sender to use out-of-band communication between
>servers - higher cost, especially in syncing the timing with the user's
>navigation between the servers.
This higher cost and difficulty of syncing is not a bug, it is a feature!
And this syncing is going to get more difficult still when we get country
level proxies.
Servers have no business sharing information without the user's consent, and
I therefore see not reason why sharing information in a sneaky way should be
particularly cheap or easy. If they want to share, let them embed the info
in a link where the user can see it.
>Matthew Rubenstein North American Media Engines
Koen.
