What characters can I not use for cookie names?

Question

I’m developing a new authentication system to decrease complexity and increase security. And I’m developing a system where some authentication cookies will have randomly generated names for each session.

My question is the following: Which group of characters should I not use for cookie names? Or what group of characters can I use for cookie names? I don’t know which set is smaller...

I would like an independent browser response.

Answer 1

In cookie names you must use any "printable ASCII character" (! until ~ and Unicode \u0021 until \u007e), excluding ,, ;, and =.

For the values, the rule is almost the same, except that it is possible to use the character = in value.