Ryan Eberhard <[EMAIL PROTECTED]> writes: [...]
> Despite the quote from Roy Fielding, I stand by my claim that > Set-Cookie is a response-header and not an entity-header. How so? The extension-header mechanism for HTTP headers is in the entity-header section of 2616. Since cookie headers don't appear elsewhere within the 2616 spec, that seems (to me) to be the only natural category for them. -- Joe Schaefer