Re: [saml-dev] common domain cookie

URL-encoding is required, I think, because of the space separator and
other special characters that may arise in the cookie value.


On Mon, 15 Nov 2004 10:44:39 -0500, Scott Cantor <> wrote:
> > Scott, if we didn't b64 encode it then I assume we would change it to at
> > least be url-encoded.
> 
> The whole value now is URL-encoded, so this wouldn't be a change to that.
> I'm just suggesting that the base64 envelope was more because the original
> values were binary and these aren't.
> 
> The interop issues were actually more around the URL encoding issue because
> the old spec wasn't clear on whether to URL encode, so I corrected that.
> 
> -- Scott
> 
>