On Wed, 1 Sep 2004, alanp wrote: [...] > > I know it. What I don't know is why people think they can set cookie > > that will be sent back to a third-party host... by whatever way - HTTP > > redirect, HTML pull, javascript... > > AFAIK the cookie & the redirected-to-host were the same beast. Perhaps > i messed up on the "path=" portion of the cookie :-( No, the path probably isn't your issue. As far as cookie handling is concerned, a browser has no interest in whether or not two host names refer to a single host. All that matters here is string comparisons on host names. John