Re: Design issues for access-control

Thomas Roessler wrote:
>>> There is a difference between deploying a web application and
>>> deploying a different HTTP stack.
> 
>> Well yes, some changes have to be made in order to support this.
>> This is not that complicated though with typical server-side
>> languages.
> 
> We seemed to have a goal to do it all without server changes at some
> point.  Seems that has been lost.

Cross site GET requests can still be supported without any server 
changes. Other methods, such as POST and DELETE will require server 
changes, but I think that's ok given that support for such methods need 
cgi, or similar, backing anyway.

/ Jonas