Re: [whatwg/fetch] Add TAO check (#955)

yoavweiss commented on this pull request.



> @@ -1800,6 +1805,15 @@ initially unset.
 being provided to an API that didn't make a range request. See the flag's usage for a detailed
 description of the attack.
 
+<p>A <a for=/>response</a> has an associated
+<dfn for=response id=concept-response-timing-allow-failed-flag>timing allow check flag</dfn>, which

Would be better to make the name more explicit. IIUC, this flag is set when TAO check passed successfully. So maybe "timing allow passed flag"?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/955#discussion_r343426438

Received on Thursday, 7 November 2019 02:09:24 UTC