[Zope3-dev] quoting cookies

Shane Hathaway shane@zope.com
Thu, 20 Feb 2003 12:02:33 -0500


Steve Alexander wrote:
> 
>>> If you want to interoperate with another system that uses its own 
>>> quoting policy, under the same host name.
>>
>> But what other system would that be?  A client that doesn't fully 
>> implement the HTTP cookie spec?  Forgive me for not understanding.
> 
> I don't believe that quoting is covered in the HTTP cookie spec.

Ah-ha, I figured out my answer.  I thought encoding details were 
specified when referring to this:

http://wp.netscape.com/newsref/std/cookie_spec.html

However, it's a preliminary spec (though Google ranks it higher than RFC 
2109) and it only recommends, not requires, URL style quoting.  Since 
the question is left unanswered, it is natural to make cookie quoting 
configurable.

I got interested in this thread because I'm trying to define patterns 
that separate configuration from software.  One pattern is that when a 
spec leaves an important detail unresolved and enough people have 
interpreted the spec differently, the implementation of that detail 
should be configurable.

Shane