W3C home > Mailing lists > Public > ietf-http-wg@w3.org > April to June 2009

Re: The HTTP Origin Header (draft-abarth-origin)

From: Adam Barth <w3c@adambarth.com>
Date: Wed, 24 Jun 2009 22:55:10 -0700
Message-ID: <7789133a0906242255i686a7e0bjdcd36ee8e762e09f@mail.gmail.com>
To: Mark Nottingham <mnot@mnot.net>
Cc: Henrik Nordstrom <henrik@henriknordstrom.net>, "Roy T. Fielding" <fielding@gbiv.com>, Larry Masinter <LMM@acm.org>, ietf-http-wg@w3.org, Lisa Dusseault <ldusseault@commerce.net>
On Wed, Jun 24, 2009 at 10:46 PM, Mark Nottingham<mnot@mnot.net> wrote:
> Do you have a spec for sec-from?

http://tools.ietf.org/html/draft-abarth-origin-01

This draft addresses the technical feedback I have receive on the -00
version of the draft.  As I said in the previous email, I'm going to
try to reply to all the outstanding emails in the next couple of days.

> And, does that imply that Origin isn't necessary?

I renamed the header in the draft in order to avoid conflicting with
CORS.  I'm hopeful that we can convince CORS to change its use of
Origin to match (because CORS has similar redirect issues).  If/when
that happens, we can unify the names again.

Adam
Received on Thursday, 25 June 2009 05:56:09 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:51:04 GMT