RFC 6265

"HTTP State Management Mechanism", April 2011

Canonical URL:

http://www.rfc-editor.org/rfc/rfc6265.txt
This document is also available in this non-normative format: PDF.

Status:

PROPOSED STANDARD

Obsoletes:

RFC 2965

Author:

A. Barth

Stream:

IETF

Source:

httpstate (app)

Please refer here for any errata for this document. To submit a new errata report, go to the main errata page.

Abstract

This document defines the HTTP Cookie and Set-Cookie header fields. These header fields can be used by HTTP servers to store state (called cookies) at HTTP user agents, letting the servers maintain a stateful session over the mostly stateless HTTP protocol. Although cookies have many historical infelicities that degrade their security and privacy, the Cookie and Set-Cookie header fields are widely used on the Internet. This document obsoletes RFC 2965. [STANDARDS-TRACK]

For the definition of Stream, see RFC 4844.