Cookie inspection

Dag-Erling Smørgrav des at linpro.no
Tue May 29 11:18:00 CEST 2007


"Poul-Henning Kamp" <phk at phk.freebsd.dk> writes:
> Does your backend include a proper Vary: header when it selects on
> language ?

Applications which use cookies should emit "Vary: Cookie".

The HTTP protocol provides a mechanism for selecting the language of a
page (client sends Accept-Language, server sends Content-Language), so
there should be no reason to use cookies for that.

The part of the patch that makes ';' equivalent to ',' is problematic,
as ';' is normally used to separate subfields within individual header
values (e.g. "Content-Type: text/html;charset=utf-8").  Whoever wrote
RFC 2109 (which uses ';' instead of ',' to separate multiple values) is
an idiot...

DES
-- 
Dag-Erling Smørgrav
Senior Software Developer
Linpro AS - www.linpro.no



More information about the varnish-misc mailing list