Lily Chen

RFC 6265bis: Set-Cookie parsing algorithm should enforce more of the syntax requirements

8

There is an ABNF syntax given for the Set-Cookie header [in section 4.4.1](https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-07#section-4.1.1), however many aspects of this are not enforced in the actual parsing algorithm [in section 5.3](https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-07#section-5.3). The...

RFC6265bis does not specify what happens to existing cookies when the Public Suffix List changes

1

If the user agent is configured to reject "public suffixes", cookies with a `Domain` attribute should be [processed](https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-07#page-28) according to the Public Suffix List (PSL), which may change frequently. The...