is it possible to hide one request cookie (but not all, so
Cookie “” is not the way) when proxying to an upstream server?
The use case is:
horror: MSIE will send all foo.com cookies to the subdomain too,
sessions (not just to Wordpress.com but to everyone because blog.foo.com
does not support HTTPS), and there’s no way to tell it not to
proposed workaround: serve blog.foo.com yourself, using Nginx,
proxying to the hosted service (as foo.wordpress.com, which does support
HTTPS), and stripping out the parent-domain request cookies
Is there a way to do this with Nginx? A way to rewrite the Cookie header
strip out selected cookies?
Or is the only way out of this to avoid the subdomain cookie situation
altogether, either by running www.foo.com instead of foo.com, or by
abandoning the subdomain and using e.g. foo.com/blog/ instead?
Posted at Nginx Forum: