cookies: the max expire time is 400 days

[bagder]

draft-ietf-httpbis-rfc6265bis-14 says:

"The limit SHOULD NOT be greater than 400 days (34560000 seconds) in
duration. The RECOMMENDED limit is 400 days in duration, but the user
agent MAY adjust the limit. Max-Age attributes that are greater than
the limit MUST be reduced to the limit."

[bagder]

The draft is now in working group last call and I consider it likely that this wording is going to end up in a final version of the document.

The biggest flaw I think right now is that this change requires a debug build to be properly tested - since we want to set a fake time to be able to verify this correctly.

[bagder]

@danielgustafsson I brought this back for consideration

[danielgustafsson]

@danielgustafsson I brought this back for consideration

Thanks! I think we should pursue this, will take it for a spin tomorrow for a review.

[danielgustafsson]

It still rubs me the wrong way that we need to fudge dates with debug builds. I'm going to have one more go at creating a test which doesn't need that and if that fails we'll just go with this I reckon.