W3C home > Mailing lists > Public > ietf-http-wg-old@w3.org > January to April 1998

Re: Minutes, HTTP-WG 8, 10 Dec 1997

From: Dave Kristol <dmk@bell-labs.com>
Date: Wed, 07 Jan 1998 12:58:13 -0500
Message-Id: <34B3C235.33590565@bell-labs.com>
To: Foteos Macrides <MACRIDES@sci.wfbr.edu>
Cc: HTTP Working Group <http-wg%cuckoo.hpl.hp.com@hplb.hpl.hp.com>
Foteos Macrides wrote:

> >State Management:
> >[...]
> >Following the slide presentation, there was discussion on the privacy
> >considerations in the draft.  Ted Hardie: In Comment-URL, the URL could
> >potentially be a non-HTTP URL, and this issue needs to be addressed.
> 
>         I am puzzled by this statement.  In early drafts, there was
> no restriction on the scheme for CommentURLs.  For security reasons,
> the Lynx field test implementation limited them to server-based
> schemes (e.g., http(s), gopher, ftp, wais).  Subsequent drafts
> explicitly limited CommentURLs to http (and https by implication :)
> and the implementation in the recent Lynx v2.7.2 release so restricts
> them.  Isn't this a closed issue?

What Larry sent out were the minutes of the WG session.  Ted raised an
issue that we checked.  In fact you are right:  the protocol is
explicitly "http" and the issue is closed.

Dave Kristol
Received on Wednesday, 7 January 1998 10:26:51 EST

This archive was generated by hypermail pre-2.1.9 : Wednesday, 24 September 2003 06:33:09 EDT