10/24 HTTP Cookies: is there a difference between specifying
"domain=.aol.com" and "domain=aol.com" ? I can't find this answer
on the web. Thanks.
\_ From RFC 2109: --dbushong
Host A's name domain-matches host B's if
* both host names are IP addresses and their host name strings match
exactly; or
* both host names are FQDN strings and their host name strings match
exactly; or
* A is a FQDN string and has the form NB, where N is a non-empty name
string, B has the form .B', and B' is a FQDN string. (So, http://x.y.com
domain-matches <DEAD>.y.com<DEAD> but not http://y.com.)
* A is a FQDN string and has the form NB, where N is a non-empty
name string, B has the form .B', and B' is a FQDN string. (So,
http://x.y.com domain-matches <DEAD>.y.com<DEAD> but not http://y.com.) |