On 26/04/17 20:13, Christopher Schultz wrote: > On 4/26/17 2:55 PM, Mark Thomas wrote:
<snip/> >> RFC 2109 allows quoted string to be used. In this Tomcat can (and >> will) do what needs to be done to make the cookie value 'just >> work'. > So does 6265 just basically do-away with all attempts to quote things > and say "if you want weird stuff in there, use base64"? Exactly. <quote> To maximize compatibility with user agents, servers that wish to store arbitrary data in a cookie-value SHOULD encode that data, for example, using Base64 [RFC4648]. </quote> Mark --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org