Steps to reproduce
name your computer: hostname_with_at_least_one_underscore
Add a web application with forms authentication.
Try to access and login from a remote machine via http://hostname_with_at_least_one_underscore
IE could simply not navigate to sites with underscores in the hostname.
If violating RFC 1123 is grounds for having your cookies ignored, maybe it should be grounds for being entirely inaccessible.
What was the Internet Explorer team thinking?
Instead of secretly eating the cookies, why not let the user know what’s happening?
Give them a choice in the matter or at least tell them they don’t have a choice.
If you then assume that most people will not read the warning message and will instinctively click the “Yes, please do what I asked you to do” button, then you remove that button and you are right back to where Firefox is. And that is exactly how it should be.
At least this behavior would be consistent and, provided there was sensible error messaging.
Also, it would give non-developer users with control of their hostnames a chance to fix the problem.
Comments and activity
- Microsoft Edge Team
Changed Assigned To to “IPBS P.”
Changed Status to “By design”
Changed Assigned To from “IPBS P.” to “Ivan P.”