IETF RFC 6265
[ACTIVE]
HTTP State Management Mechanism
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 37
- Abstract
- This document defines the HTTP Cookie and Set-Cookie header fields. These header fields can be used by HTTP servers to store state (called cookies) at HTTP user agents, letting the servers maintain a stateful session over the mostly stateless HTTP protocol. Although cookies have many historical infelicities that degrade their security and privacy, the Cookie and Set-Cookie header fields are widely used on the Internet. This document obsoletes RFC 2965. [STANDARDS-TRACK]
- Publication Date
- 2011-04-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC6265- Link
- https://doi.org/10.17487/RFC6265
- Author(s)
- Adam Barth
- Keyword(s)
- Cookie, Set-Cookie, HttpOnly
Latest version of IETF RFC 6265
Document Versions — IETF RFC 6265
-
▶ IETF RFC 6265 (2011-04-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- ANSI/INCITS X3.4:1986 (R1997) [Active]
- IETF RFC 1034 [Active*]
- IETF RFC 1123 [Active*]
- IETF RFC 2119 [Active*]
- IETF RFC 2616 [Superseded*]
- IETF RFC 3490 [Superseded*]
- IETF RFC 4790 [Active*]
- IETF RFC 5234 [Active, Amended*]
- IETF RFC 5890 [Active*]
Bibliographic Reference(s)
- Barth, A., Jackson, C., and J. Mitchell, "Robust Defenses for Cross-Site Request Forgery", 2008, < http://portal.acm.org/citation.cfm?id=1455770.1455782 >. EXTERNAL
- Kristol, D., "HTTP Cookies: Standards, Privacy, and Politics", ACM Transactions on Internet Technology Vol. 1, #2, November 2001, < http://arxiv.org/abs/cs.SE/0105018 >. EXTERNAL
- Aggarwal, G., Burzstein, E., Jackson, C., and D. Boneh, "An Analysis of Private Browsing Modes in Modern Browsers", 2010, < http://www.usenix.org/events/sec10/tech/ full_papers/Aggarwal.pdf >. EXTERNAL
- Davis, M. and M. Suignard, "Unicode IDNA Compatibility Processing", Unicode Technical Standards # 46, 2010, < http://unicode.org/reports/tr46/ >. EXTERNAL
- Netscape Communications Corp., "Persistent Client State -- HTTP Cookies", 1999, < http://web.archive.org/web/ 20020803110822/http://wp.netscape.com/newsref/std/ cookie_spec.html>. EXTERNAL
- IETF RFC 2109 [Superseded*]
- IETF RFC 2818 [Superseded*]
- IETF RFC 2965 [Superseded*]
- IETF RFC 3629 [Active*]
- IETF RFC 3864 [Active*]
- IETF RFC 4648 [Active*]
- IETF RFC 5895 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC6265.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 6265, HTTP State Management Mechanism. Available at https://doi.org/10.17487/RFC6265
Snippet:
IETF RFC 6265, HTTP State Management Mechanism. Available at https://doi.org/10.17487/RFC6265
HTML (ISO 690 compliant)
Preview:
IETF RFC 6265, HTTP State Management Mechanism. Available at https://doi.org/10.17487/RFC6265
Snippet:
<span class="citation"><cite>IETF RFC 6265</cite>, HTTP State Management Mechanism. Available at <a href="https://doi.org/10.17487/RFC6265" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6265</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 6265, HTTP State Management Mechanism
doi: 10.17487/RFC6265
url: https://doi.org/10.17487/RFC6265
doi: 10.17487/RFC6265
url: https://doi.org/10.17487/RFC6265
Snippet:
<li> <cite id="bib-rfc6265">IETF RFC 6265</cite>, HTTP State Management Mechanism <span class="doi">10.17487/RFC6265</span> </li>
Referenced By
- IETF RFC 6454 [Active*]
- IETF RFC 6455 [Active*]
- IETF RFC 6750 [Active*]
- IETF RFC 6797 [Active*]
- IETF RFC 7230 [Superseded*]
- IETF RFC 7231 [Superseded*]
- IETF RFC 7234 [Superseded*]
- IETF RFC 7540 [Superseded*]
- IETF RFC 7838 [Active*]
- IETF RFC 8216 [Active*]
- IETF RFC 8288 [Active*]
- IETF RFC 8615 [Active*]
- IETF RFC 9000 [Active*]
- IETF RFC 9113 [Active*]