Launchpad itself

  1. Bug #586908
  2. Comment #12

Comment 12 for bug 586908

Revision history for this message
Robert Collins (lifeless) wrote : Re: [Bug 586908] Re: OpenID login fails for non-beta LP users using lynx and possibly other browsers

On Sat, Nov 20, 2010 at 8:13 AM, Benji York <email address hidden> wrote:
> It turns out that the cookie spec(s) (and browser implementations) don't
> allow setting a domain without a leading dot, so specifying a cookie
> with domain=launchpad.net isn't even possible.  Even if it were, having
> the same cookie with two different domains (example.com and
> .example.com) wouldn't work because one will always override the other.

I don't quite follow.
The cookies can override each other without breaking the proposal -
they have the same value.
What happens in browsers where we try to set both, once with and without the . ?

If they silently ignore the non-leading dot one, it seems like a win.

-Rob