You have it now, the browser will only send cookies back that match the domain you are requesting. You will not need to set domain/path if you are creating cookies in the restlet code as long as you hit the right domain in the browser. Mitch
but if you try with http://127.0.0.1:8080/restlet/test (you can get the cookie) or with a default domain name define in you WINDOWS/system32/drivers/etc/host ( test.domain.com) http://test.domain.com:8080/restlet/test You can get the cookie in your browser. And the second time when i hit my application, i can get the cookie in my filter ! I said another mistake, i thought i will get all my cookies of my browser. But NOT, it is a security issue, so it was normal, i didn't get the others cookies. Now when i get my cookie, i just have in the object the name & the value, not the domain and the path (but i think that is a default behavior). Tell me if it is not true. Thanks a lot. Bye regis.