2.2.3.5 Cookie

  • Article

Used by the server to store client authorization, authentication, and protocol state information in a format opaque to the client.

Defined in namespace: http://www.microsoft.com/SoftwareDistribution.

 <s:complexType name="Cookie">
   <s:sequence>
     <s:element minOccurs="1" maxOccurs="1" name="Expiration" 
        type="s:dateTime" />
     <s:element minOccurs="0" maxOccurs="1" name="EncryptedData" 
        type="s:base64Binary" />
   </s:sequence>
 </s:complexType>

Expiration: A clear-text copy of the time this Cookie expires. The actual time the Cookie expires SHOULD be stored in EncryptedData to prevent client tampering.

EncryptedData: An opaque sequence of one or more bytes that contain implementation-specific authorization, authentication, and protocol state information for use by the server. The format of this data, including the type of encryption used, if any, is implementation-specific. Different server implementations can use different data formats that are not always compatible. A server SHOULD return an InvalidCookie error if passed a Cookie that a client obtained from another server.

The data SHOULD include the client ID, the target groups the client belongs to; the Cookie expiration time; the client protocol version; the last time the client synchronized software, drivers, and printer catalog; and the server's identity. This element MUST be present.