On Fri, 2009-10-16 at 00:24 +0100, John-Mark Bell wrote: > All the specifications say that user agents should refuse to accept > domain cookies that do not have a '.' in their domain.
Ugh. That's badly worded. What I meant was, "... accept domain cookies that do not have more than one '.' in their domain.". John.