Cookies specification compliance issues in modern browsers

Star

research by Ivan Nikulin
(email: ifaaan@gmail.com, github: inikulin, twitter: _inikulin_)

This table lists RFC 6265 compliance issues found in modern browsers. Data was obtained by running the IETF test suite across major browsers using a specially made test runner. Test fails are divided into categories for the working group to distinguish implementation bugs from de facto standards that should make their way to the specification.

Issue groups:

- Test fails in all browsers with the identical results.
- Test fails in all browsers, but with different results. Possible de facto standard.
- Test fails in the majority of browsers with the identical results. Possible de facto standard.
- Test fails in the majority of browsers, but with different results.
- Test fails in the minority of browsers. More likely it's an implementation bug than planned behavior.
- Test fails only in one browser. Implementation bug.

Note: all cookies are set on page http://home.example.org:8888/test and results are inspected on http://home.example.org:8888/cookie-parser-result, except for those tests where the results URL is explicitly specified.