lcamtuf :verified: :verified: :verified: on Nostr: There's a good blog post from nprofile1q…7pd8t about cookie parsing: ...

There's a good blog post from nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqaz9lfgl6sjvya200fl45np42tcvf4c8ldnwy0jn279yhqzjr9mesd7pd8t (nprofile…pd8t) about cookie parsing: https://grayduck.mn/2024/11/21/handling-cookies-is-a-minefield/

And I guess it's time to dust off my broader, 2010 rant about the same: https://lcamtuf.blogspot.com/2010/10/http-cookies-or-how-not-to-design.html

Some things have improved, but cookies are still a bit of a design fail.