Contact emailsyoavwe...@chromium.org

Explainer
https://yoavweiss.github.io/delete-cookie/draft-deletecookie-weiss-http-00/draft-deletecookie-weiss-http.html#section-2

Specification
https://yoavweiss.github.io/delete-cookie/draft-deletecookie-weiss-http-00/draft-deletecookie-weiss-http.html

Summary

A header that would enable servers to delete cookies they receive without
having to know the "path" or "domain" parameters with which these cookies
were set.


Blink componentInternals>Network>Cookies
<https://issues.chromium.org/issues?q=customfield1222907:%22Internals%3ENetwork%3ECookies%22>

Motivation

Long-operating web sites can often find themselves dealing with "cookie
cruft" - cookies that no longer have backend logic that corresponds with
them. Such cookies may have been set at some point in the past with
far-reaching expiration dates, and are now causing useless cookie bloat at
best, or using up quotas at the expense of relevant cookies at worst
Deleting cookies is possible today by setting their expiry date to one in
the past, but that requires one to know the "domain" and "path" parameters
with which the cookies were set. That is not something that can be
passively observed on the server side by default.


Initial public proposal
https://lists.w3.org/Archives/Public/ietf-http-wg/2025JanMar/0164.html

TAG reviewNone.
This feature will be discussed at the HTTPWG. It's unclear to me if the TAG
should also weigh in on this.

TAG review statusNot started

Risks


Interoperability and Compatibility

This feature has no compatibility risk. It's also getting engagement at the
HTTPWG, and no strong pushback, which makes me think its interop risk is
low.

*Gecko*: No signal

*WebKit*: No signal

*Web developers*: No signals

*Other signals*:

WebView application risks

Does this intent deprecate or change behavior of existing APIs, such that
it has potentially high risk for Android WebView-based applications?

None


Debuggability

None


Is this feature fully tested by web-platform-tests
<https://chromium.googlesource.com/chromium/src/+/main/docs/testing/web_platform_tests.md>
?Yes <https://chromium-review.googlesource.com/c/chromium/src/+/6298878>

Flag name on about://flagsNone

Finch feature nameNone for now, but I'll add one.

Non-finch justificationNone

Requires code in //chrome?False

Estimated milestones

No milestones specified


Link to entry on the Chrome Platform Status
https://chromestatus.com/feature/5195868787179520?gate=5086227331809280

This intent message was generated by Chrome Platform Status
<https://chromestatus.com/>.

-- 
You received this message because you are subscribed to the Google Groups 
"blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to blink-dev+unsubscr...@chromium.org.
To view this discussion visit 
https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAOmohS%2BsLyTOyQ2g49iMyVXrEeEwktK2ogMoseJDGtySjXBtpQ%40mail.gmail.com.

Reply via email to