Here are my proposed changes to fix 6873543 (httpOnly cookies). Also took the opportunity to clarify the javadoc of a few methods. http://cr.openjdk.java.net/~jccollet/6873543/webrev.00/