Re: The HTTP Origin Header (draft-abarth-origin)

Ah, thanks, will take a look.

Cheers,


On 25/06/2009, at 3:55 PM, Adam Barth wrote:

> On Wed, Jun 24, 2009 at 10:46 PM, Mark Nottingham<mnot@mnot.net>  
> wrote:
>> Do you have a spec for sec-from?
>
> http://tools.ietf.org/html/draft-abarth-origin-01
>
> This draft addresses the technical feedback I have receive on the -00
> version of the draft.  As I said in the previous email, I'm going to
> try to reply to all the outstanding emails in the next couple of days.
>
>> And, does that imply that Origin isn't necessary?
>
> I renamed the header in the draft in order to avoid conflicting with
> CORS.  I'm hopeful that we can convince CORS to change its use of
> Origin to match (because CORS has similar redirect issues).  If/when
> that happens, we can unify the names again.
>
> Adam


--
Mark Nottingham     http://www.mnot.net/