Whoa! I had no idea this had changed. It used to be that cookies for .example.com and example.com were different -- one was accessible by foo.example.com and th

Whoa! I had no idea this had changed. It used to be that cookies for .example.com and example.com were different -- one was accessible by foo.example.com and the other wasn't. Seems RFC 6265 changed the behavior[0]. I assume the RFC explains the reasoning, but prima facie, this seems like a bad change to me. [0] https://stackoverflow.com/posts/23086139/revisions https://stackoverflow.com/posts/23086139/revisions