How close does the domain have to match?? Would a cookie with domain
of .se be close enough for the browser to be fooled?

I don't have any idea - I'm just throwing out ideas in case it jogs
someone's memory.

Ralph

On Tue, 22 Feb 2005 14:08:03 +0100 (CET), Daniel Stenberg
<daniel-curl_at_haxx.se> wrote:
> On Tue, 22 Feb 2005, Ralph Mitchell wrote:
>
> > You may be stuck with setting up a man-in-the-middle script
>
> That won't work either that easily, since browsers don't accept cookies for a
> host/domain set from another host/domain.
>
> The man-in-the-middle script would have to be pretending to be a proxy, as
> only then can you fool a browser to accept a cookie for a host like that.
>
> Unless I'm mistaking of course.
>
> --
> Daniel Stenberg -- http://curl.haxx.se -- http://daniel.haxx.se
> Dedicated custom curl help for hire: http://haxx.se/curl.html
>
Received on 2005-02-22