Re: Semantics of HTTPS

On Mon, Aug 6, 2012 at 1:32 PM, Mark Nottingham <mnot@mnot.net> wrote:

> <
> https://svn.tools.ietf.org/svn/wg/httpbis/draft-ietf-httpbis/latest/p1-messaging.html#https.uri>
> is slated to define the semantics of HTTPS urls.
>
> We currently talk about HTTPS' impact on caches and identity there, but we
> don't mention one other major effect on HTTP -- the use of CONNECT to
> proxies.
>
> I think we need to define HTTPS as having a semantic of *end-to-end* use
> of SSL/TLS, and therefore CONNECT to proxies.
>

+1.  I don't think we can take away https' end-to-end properties
retroactively.

Mike


>
> Make sense?
>
> --
> Mark Nottingham
> http://www.mnot.net/
>
>
>
>
>
>

Received on Monday, 6 August 2012 23:07:48 UTC