W3C home > Mailing lists > Public > ietf-http-wg@w3.org > October to December 2016

Fwd: New Version Notification for draft-nottingham-site-wide-headers-01.txt

From: Mark Nottingham <mnot@mnot.net>
Date: Thu, 24 Nov 2016 13:28:13 +1100
Cc: Mike West <mkwst@google.com>, "Emily Stark (Dunn)" <estark@google.com>
To: HTTP Working Group <ietf-http-wg@w3.org>
Message-Id: <FCDFC352-5D68-456F-AFF4-39E9E1697AF2@mnot.net>
FYI, updated draft.

Prettier (and latest) version available at:
  https://mnot.github.io/I-D/site-wide-headers/ <https://mnot.github.io/I-D/site-wide-headers/>

Biggest change in this revision is restricting site-wide headers to a whitelist + a prefix ("site-"). Feedback appreciated.

I talked to a number of folks about this in Seoul, and it seems like some potential implementers have a preference for a header-based approach, rather than creating a JSON data structure with semantics that diverge from headers.

This is my gut feeling too, but it could be that they were agreeing with me because I was there. Another approach is suggested by Mike West here:
  https://wicg.github.io/origin-policy/ <https://wicg.github.io/origin-policy/>

More than anything, I'd like to have a discussion about this and see if we can move forward, in one direction or another (I don't think the differences between the proposals represent insurmountable hurdles). That's because we continue to have new site-wide mechanisms defined, e.g.:
  https://tools.ietf.org/html/draft-stark-expect-ct <https://tools.ietf.org/html/draft-stark-expect-ct>

Cheers,


> Begin forwarded message:
> 
> From: internet-drafts@ietf.org
> Subject: New Version Notification for draft-nottingham-site-wide-headers-01.txt
> Date: 24 November 2016 at 1:20:06 pm AEDT
> To: "Mark Nottingham" <mnot@mnot.net>
> 
> 
> A new version of I-D, draft-nottingham-site-wide-headers-01.txt
> has been successfully submitted by Mark Nottingham and posted to the
> IETF repository.
> 
> Name:		draft-nottingham-site-wide-headers
> Revision:	01
> Title:		Site-Wide HTTP Headers
> Document date:	2016-11-24
> Group:		Individual Submission
> Pages:		10
> URL:            https://www.ietf.org/internet-drafts/draft-nottingham-site-wide-headers-01.txt
> Status:         https://datatracker.ietf.org/doc/draft-nottingham-site-wide-headers/
> Htmlized:       https://tools.ietf.org/html/draft-nottingham-site-wide-headers-01
> Diff:           https://www.ietf.org/rfcdiff?url2=draft-nottingham-site-wide-headers-01
> 
> Abstract:
>   This document specifies an alternative way for Web sites to send HTTP
>   response header fields that apply to an entire origin, to improve
>   efficiency.
> 
> 
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> The IETF Secretariat
> 

--
Mark Nottingham   https://www.mnot.net/
Received on Thursday, 24 November 2016 02:28:47 UTC

This archive was generated by hypermail 2.3.1 : Thursday, 24 November 2016 02:28:50 UTC