diff --git a/files/en-us/web/http/reference/headers/set-cookie/index.md b/files/en-us/web/http/reference/headers/set-cookie/index.md index 6f79a3813cc456a..2dfe8fa036e73ea 100644 --- a/files/en-us/web/http/reference/headers/set-cookie/index.md +++ b/files/en-us/web/http/reference/headers/set-cookie/index.md @@ -74,7 +74,8 @@ Set-Cookie: =; Domain=; Secure; HttpOnl Only the current domain can be set as the value, or a domain of a higher order, unless it is a public suffix. Setting the domain will make the cookie available to it, as well as to all its subdomains. - If omitted, this attribute defaults to the host of the current document URL, not including subdomains. + If omitted, the cookie is returned only to the host that sent them (i.e., it becomes a "host-only cookie"). + This is more restrictive than setting the host name, as the cookie is not made available to subdomains of the host. Contrary to earlier specifications, leading dots in domain names (`.example.com`) are ignored.