MoinQ:

http/cookie/Cookieについて、ここに記述してください。

1. RFC

Notice that the cookie attributes are not returned. 

In particular,  the server cannot determine from the Cookie header alone
   when a cookie will expire, for which hosts the cookie is valid,
   for which  paths the cookie is valid,
  or whether the cookie was set with the Secure or HttpOnly attributes.

The semantics of individual cookies in the Cookie header are not defined by this document.
Servers are expected to imbue these cookies with application-specific semantics.

なにも規程されていない。

domain-match の場合:

the canonicalized request-host domain-matches the cookie's domain