arturobernalg commented on PR #869: URL: https://github.com/apache/httpcomponents-client/pull/869#issuecomment-5308859309
> @arturobernalg `RFC 6265bis` is still a draft, it is not? What is so important about this feature that we need to rush it and implement a draft RFC which has not been accepted as standard yet? @ok2c You're right, it's still a draft — but the __Host-/__Secure- prefix and `SameSite` bits it covers are already universal, interoperable browser behaviour, and the prefix checks are a real acceptance/security gap in our cookie store today. Happy to scope it to just those stable parts and mark it @Experimental, or hold it until 6265bis is published -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
