Re: [whatwg/fetch] Uploading a Request made from a ReadableStream body (#425)

> Also, didn't we decide that this would require "cors"? Otherwise it seems you can maybe do more careful timing attacks?

I don't remember that. Can you point a discussion? no-cors is already timing-attack fragile, though I'm fine with that restriction.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/425#issuecomment-270617026