Re: The HTTP Origin Header (draft-abarth-origin)

On Wed, Jun 24, 2009 at 10:46 PM, Mark Nottingham<mnot@mnot.net> wrote:
> Do you have a spec for sec-from?

http://tools.ietf.org/html/draft-abarth-origin-01

This draft addresses the technical feedback I have receive on the -00
version of the draft.  As I said in the previous email, I'm going to
try to reply to all the outstanding emails in the next couple of days.

> And, does that imply that Origin isn't necessary?

I renamed the header in the draft in order to avoid conflicting with
CORS.  I'm hopeful that we can convince CORS to change its use of
Origin to match (because CORS has similar redirect issues).  If/when
that happens, we can unify the names again.

Adam