Cookie Scopes

Eric Dalquist <[email protected]> Mon, 17 Jan 2011 10:24:07 -0600
Newsgroups gmane.comp.jakarta.pluto.user
Organization UW DoIT
Message-ID <[email protected]>
This is a cryptographically signed message in MIME format.

--------------ms000705010807080201030205
Content-Type: multipart/alternative;
 boundary="------------070700050809010204090600"

This is a multi-part message in MIME format.
--------------070700050809010204090600
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable

I've re-read the portlet spec on cookies several times now and one thing =

is still not clear, how are cookies set by portlets scoped?

It seems like there are a few options:

   1. Cookies are scoped the same way Preferences are, to the instance
      of the portlet entity
   2. Cookies are scoped at the definition level, essentially Portlet A
      can share a cookie among any number of users but Portlet B will
      never see it
   3. Cookies are not scoped at all. All portlets work in the same
      general space for cookies and a cookie set by Portlet A can be
      seen by Portlet B

Any thoughts on the intent in the spec?

-Eric

--------------070700050809010204090600
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
  <head>

    <meta http-equiv=3D"content-type" content=3D"text/html; charset=3DISO=
-8859-1">
  </head>
  <body bgcolor=3D"#ffffff" text=3D"#000000">
    I've re-read the portlet spec on cookies several times now and one
    thing is still not clear, how are cookies set by portlets scoped?<br>=

    <br>
    It seems like there are a few options:<br>
    <ol>
      <li>Cookies are scoped the same way Preferences are, to the
        instance of the portlet entity</li>
      <li>Cookies are scoped at the definition level, essentially
        Portlet A can share a cookie among any number of users but
        Portlet B will never see it</li>
      <li>Cookies are not scoped at all. All portlets work in the same
        general space for cookies and a cookie set by Portlet A can be
        seen by Portlet B</li>
    </ol>
    Any thoughts on the intent in the spec?<br>
    <br>
    -Eric<br>
  </body>
</html>

--------------070700050809010204090600--

--------------ms000705010807080201030205
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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==
--------------ms000705010807080201030205--