Usually, a browser groups cookies into a single Cookie
header, such as:
Cookie: a=1; b=2
Does the standard allow to send these
Chanced upon this page while looking for details on the topic. A quote from HTTP State Management Mechanism
, RFC 6265 ought to make things clearer:
5.4. The Cookie Header
When the user agent generates an HTTP request, the user agent MUST NOT attach more than one Cookie header field.
It looks like the use of multiple Cookie
headers is, in fact, prohibited!