This repository has been archived by the owner on Mar 4, 2020. It is now read-only.

Mention impact on document.cookie #5

Open

ericlaw1979 opened this issue Apr 30, 2018 · 0 comments

ericlaw1979 commented Apr 30, 2018

Current phrasing like

those cookies which would actually be sent over HTTP

etc.

talks all about sending a Cookie header, but we should be clear that this applies to document.cookie as well?

We also may want to clarify that deletion of a cookie lacking a SECURE attribute also impacts that cookie when a HTTPS request is made?

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.