W3C home > Mailing lists > Public > ietf-http-wg@w3.org > October to December 2015

RE: Alt-svc and CORS

From: Christer Holmberg <christer.holmberg@ericsson.com>
Date: Wed, 7 Oct 2015 09:15:46 +0000
To: Julian Reschke <julian.reschke@gmx.de>, Martin Thomson <martin.thomson@gmail.com>
CC: HTTP Working Group <ietf-http-wg@w3.org>
Message-ID: <7594FB04B1934943A5C02806D1A2204B37B281B0@ESESSMB209.ericsson.se>
Hi,

>>> 1.       The browser requests index.html from origin duexample.com (based on
>>> whatever logic)
>>
>> Here's your problem.  The browser makes the request to the origin 
>> example.com.  The fact that a server at duxample.com is serving this 
>> request is irrelevant in this context.
>
> Right. That's a better way to explain it :-)

That's good.

But, would it be good to include some explicit clarification text, saying that the value of the Origin header doesn't change?

Regards,

Christer

Received on Wednesday, 7 October 2015 09:16:13 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 1 March 2016 11:11:39 UTC