W3C home > Mailing lists > Public > www-font@w3.org > July to September 2009

Re: Same-origin policies (Re: The other party in all this)

From: Bert Bos <bert@w3.org>
Date: Tue, 07 Jul 2009 11:44:24 +0200
Message-ID: <4A5318F8.2020900@w3.org>
To: www-font@w3.org
Tab Atkins Jr. wrote:

> While I agree, are you trying to suggest that people think that
> CORS/same-origin restrictions carry ownership information with them in
> any way?

"Ownership" isn't exactly the word I'm looking for, but the adoption of 
CORS to express licenses implies that the author of http://example.com/A 
  has a certain right over http://example.com/B (or vice versa, 
depending on which links to which). That would depend *only* on the 
similarity of their URLs, CORS offers no way to negate that relation.

The Web architecture document[1] says that such inferences from URLs 
should not be made. Two URLs are either the same or different. There is 
nothing in between.

[1] http://www.w3.org/TR/2004/REC-webarch-20041215/#uri-opacity



Bert
-- 
   Bert Bos                                ( W 3 C ) http://www.w3.org/
   http://www.w3.org/people/bos                               W3C/ERCIM
   bert@w3.org                             2004 Rt des Lucioles / BP 93
   +33 (0)4 92 38 76 92            06902 Sophia Antipolis Cedex, France
Received on Tuesday, 7 July 2009 09:45:01 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Saturday, 11 June 2011 00:14:02 GMT