﻿id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
28989	Allow deleting cookies using restricted cookie prefixes	Alvin Lindstam	nobody	"When using a cookie name with a cookie prefix such as `__Secure-` or `__Host-`, modern browsers (all except Internet Explorer) ignore the Set-Cookie-header if it does not use the secure flag and otherwise match the prefix's requirements.

Django's `response.delete_cookie` method always results in a Set-Cookie-header without the secure flag, which means that it can't delete those cookies.

It should be possible to delete those cookies, and the prefixes should be possible to use as `SESSION_COOKIE_NAME` (they are currently not deleted when the session is emptied)."	New feature	closed	HTTP handling	2.0	Normal	fixed			Accepted	1	0	0	0	0	0
