Why is Max-Age the only upper kebab case among cookie attributes?

[Jxck]

• Max-Age
• HttpOnly
• SameSite

🤔

[annevk]

Seems this can be answered by some quick searches? https://datatracker.ietf.org/doc/html/rfc2109 suggests Max-Age was first introduced in 97, with HttpOnly added in 02 as per https://owasp.org/www-community/HttpOnly. SameSite came much later and surprisingly followed the HttpOnly naming pattern.

Is there any request or issue here?