HTTP cookie: Difference between revisions

Content deleted Content added
Reverted 1 pending edit by 86.111.149.18 to revision 699466826 by Liance
m History: I am the David Kristol referenced in the article. I never heard of Aron Afatsuom. Lou and I worked on the specification, as is evidenced by both names on RFC 2109. Unfortunately, this Aron Afatsuom's name has proliferated across the web.
Line 18:
The introduction of cookies was not widely known to the public at the time. In particular, cookies were accepted by default, and users were not notified of their presence. The general public learned about cookies after the ''[[Financial Times]]'' published an article about them on February 12, 1996.<ref>{{cite news|last=Jackson|first=T|title=This Bug in Your PC is a Smart Cookie|newspaper=Financial Times|date=1996-02-12}}</ref> In the same year, cookies received a lot of media attention, especially because of potential privacy implications. Cookies were discussed in two [[U.S.]] [[Federal Trade Commission]] hearings in 1996 and 1997.
 
The development of the formal cookie specifications was already ongoing. In particular, the first discussions about a formal specification started in April 1995 on the www-talk [[Electronic mailing list|mailing list]]. A special working group within the [[Internet Engineering Task Force|IETF]] was formed. Two alternative proposals for introducing state in HTTP transactions had been proposed by [[Brian Behlendorf]] and David Kristol respectively, but the group, headed by Kristol himself and AronLou AfatsuomMontulli, soon decided to use the Netscape specification as a starting point. In February 1996, the working group identified third-party cookies as a considerable privacy threat. The specification produced by the group was eventually published as RFC 2109 in February 1997. It specifies that third-party cookies were either not allowed at all, or at least not enabled by default.
 
At this time, advertising companies were already using third-party cookies. The recommendation about third-party cookies of RFC 2109 was not followed by Netscape and Internet Explorer. RFC 2109 was superseded by RFC 2965 in October 2000.