Re: Simplifying the AC spec

On Fri, 08 Feb 2008 20:25:13 +0100, Jonas Sicking <jonas@sicking.cc> wrote:
>> At this point it would make sense to rename the Method-Check-* headers  
>> too. I recommend changing the "Method-Check-" part to  
>> "Access-Control-", so that the headers are:
>>     On requests from a client:
>>                   Access-Control-Origin
>>     On responses to OPTIONS when the policy is elsewhere:
>>                   Access-Control-Policy-Path
>>     On all other responses:
>>                   Access-Control
>>                   Access-Control-Max-Age
>>                   Access-Control-Policy-Path
>
> This seems somewhat simplified. The last two would only exist for  
> OPTIONS replies, right? And they are both optional so neither might  
> exist even there.

Yeah. It's more like this:

   On requests from a client:
     Access-Control-Origin
   On responses to OPTIONS when the policy is elsewhere:
     Access-Control-Policy-Path
   On responses to OPTIONS defining a policy path:
     Access-Control
     Access-Control-Max-Age (optional)
     Access-Control-Policy-Path
   On responses to OPTIONS:
     Access-Control
     Access-Control-Max-Age (optional)
   On other responses:
     Access-Control


-- 
Anne van Kesteren
<http://annevankesteren.nl/>
<http://www.opera.com/>