Question

I have application on my localhost in https. But the certification on localhost is broken.

Below, response header. Problem: MyCookie is not created:

MyCookie=MyValue;Path=/;Domain=localhost;Secure; HttpOnly

But for this header. The cookie is created:

MyCookie=MyValue;Path=/;Secure; HttpOnly

Is there any Chrome politics which disallow create cookie for broken https page which set domain in the header?

Answer 1

Explicit setting domain cookie on localhost doesn’t work for chrome.

From this:

You can only set domain cookies for registry controlled domains, i.e.
something ending in .com or so, but not IPs or intranet hostnames like
localhost