On Tue, Jun 14, 2011 at 10:00 PM, Eran Hammer-Lahav <[email protected]> wrote: >> -----Original Message----- >> From: [email protected] [mailto:[email protected]] On Behalf >> Of Manger, James H >> Sent: Tuesday, June 14, 2011 7:06 PM >> To: oauth >> Subject: Re: [OAUTH-WG] FW: MAC: Cookie name or value as MAC key id >> >> P.S. id=<cookie-name> is not ideal for indicating which MAC cookie is being >> used as there can be multiple cookies with the same cookie-name (eg set >> from sibling domains). > > I'll let Adam answer that.
Yeah, that's a corner case that sucks. Turns out cookie suck in a lot of ways like that. :) Adam _______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
