Take the 2-minute tour ×  I recently decided to comply with the
YSlow recommendation that static content is hosted on a
cookieless domain.  As I already use the root of my domain
(donaldjenkins.com) to host my website—on which Google Analytics
sets a few cookies—that meant I had to move the CNAME URL for
the CDN serving the static files from cdn.donaldjenkins.com to
an entirely separate, dedicated domain. I purchased cdn.dj (yes,
it's a real Djibouti domain name), hosted the files on the root
(which contains nothing else, other than a robots.txt file) and
set a CNAME of e.cdn.dj for the CDN. This setup works, but I was
rather surprised to find that YSlow was still flagging the
static files for not being cookie-free: here's a screenshot:
Static files still not cookie-free  The cdn.djdomain was new,
and was never used for anything other than hosting these static
files. Running httpfox on the site shows the _utma and _utmz
Google Analytics cookies are being set on the static files
listed above—despite their bei