Skip to content

Conversation

@yoavweiss
Copy link
Contributor

@yoavweiss yoavweiss commented Aug 11, 2025

Following discussions on Matrix, this renames the __HostHttp- to be __Host-Http-.

While a bit uglier, this makes it easier to deploy this to non-supporting browsers while not losing the characteristics that __Host- provides.

Tested in web-platform-tests/wpt#54226 and web-platform-tests/wpt#54260. Relevant cookie store changes in whatwg/cookiestore#286

@yoavweiss yoavweiss requested a review from annevk August 11, 2025 03:44
@yoavweiss
Copy link
Contributor Author

^^ @DCtheTall @valenting

@yoavweiss
Copy link
Contributor Author

(build failure seems unrelated)

@annevk
Copy link
Contributor

annevk commented Aug 11, 2025

Filed #3155 on the build failure.

This seems okay to me, but we'll need test coverage changes and a corresponding change to the Cookie Store API. And ideally they're all linked from OP for clarity.

@yoavweiss
Copy link
Contributor Author

This seems okay to me, but we'll need test coverage changes and a corresponding change to the Cookie Store API. And ideally they're all linked from OP for clarity.

on it

@reschke reschke added editorial cookies Issues with the layered-cookies draft. labels Aug 11, 2025
@johannhof
Copy link
Member

No concerns on the name from me.

@annevk annevk removed the editorial label Aug 12, 2025
@annevk
Copy link
Contributor

annevk commented Aug 12, 2025

I don't think a name change is editorial. This has normative impact.

@annevk annevk merged commit 126f2e5 into httpwg:main Aug 12, 2025
1 check passed
annevk pushed a commit to whatwg/cookiestore that referenced this pull request Aug 12, 2025
aarongable pushed a commit to chromium/chromium that referenced this pull request Aug 14, 2025
As discussed at https://groups.google.com/a/chromium.org/g/blink-dev/c/WsXlDO6oO2E/m/ApG8wQCkAQAJ, this renames the __HostHttp- cookie
prefix to make it easier to deploy before support for it becomes
ubiquitous. That way, developers can rename their cookies from
`__Host-something` to `__Host-Http-something` without losing their
host-scope semantics.

Spec PRs: httpwg/http-extensions#3153 and
whatwg/cookiestore#286

Change-Id: Ibef7870914618e54d16b3ff16ccb8946db32bb76
Bug: 437940200
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6839519
Reviewed-by: Dylan Cutler <[email protected]>
Commit-Queue: Yoav Weiss (@Shopify) <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1501411}
@simon-friedberger
Copy link

Following discussions on Matrix, this renames the __HostHttp- to be __Host-Http-.

Which channel? Could you summarize here?

@yoavweiss
Copy link
Contributor Author

The #cookies channel.

Discussion
  • Yoav - Hey folks! Thinking about the deployment of __HttpHost- prefixes (with Shopify's cookie folks) I think we should've spelled it __Host-__Http- (or something similar) to enable deployment in non-supporting browsers and have __Host as a fallback. Otherwise, folks that rely on __Host- today will not be able to deploy __HttpHost- until all browsers support it (or with UA sniffing server-side logic that adds a bunch of complexity)
  • bvandersloot - Yeah, trying to get the progressive enhancement angle of __Host-__Http- seems nice. Especially in the long tail of users that have out-of-date browsers.
  • Yoav -Dylan Cutler, thoughts on modifying Chromium's implementation to match that? I'm assuming usage is still tiny/non-existent.. I guess we just need to add a dash and rename from __HostHttp- to __Host-Http- (to be clear: I can take on the implementation change/intent if you're cool with that)
  • bvandersloot - valentin from our networking team would know about Gecko's status here that I would
  • valentin - landed [1974979 - Add `__Http-` and `__HostHttp-` cookie prefixes](https://bugzilla.mozilla.org/show_bug.cgi?id=1974979) recently, but I think we're open to changing

@yoavweiss yoavweiss deleted the rename_host_http branch August 22, 2025 06:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cookies Issues with the layered-cookies draft.

Development

Successfully merging this pull request may close these issues.

5 participants