%% You should probably cite draft-ietf-httpbis-cookie-same-site instead of this I-D. @techreport{west-first-party-cookies-00, number = {draft-west-first-party-cookies-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-west-first-party-cookies/00/}, author = {Mike West}, title = {{First-Party Cookies}}, pagetotal = 8, year = 2014, month = oct, day = 27, abstract = {This document updates RFC6265, defining the "First-Party" attribute for cookies, which allows servers to mitigate the risk of cross-site request forgery and related information leakage attacks by asserting that a particular cookie should only be sent in a "first-party" context.}, }