- From: Martin Thomson <martin.thomson@gmail.com>
- Date: Wed, 21 Jan 2015 09:35:22 -0800
- To: Julian Reschke <julian.reschke@gmx.de>
- Cc: Mark Nottingham <mnot@mnot.net>, HTTP Working Group <ietf-http-wg@w3.org>
On 21 January 2015 at 03:10, Julian Reschke <julian.reschke@gmx.de> wrote: >> That seems to indicate something like "SHOULD send the alternative service >> hostname in the Alt-Svc-Used header field value, unless the client has been >> explicitly configured not to send it." > > Sounds good to me. Likewise. I could almost live with a MUST now, though I'm not confident enough that I've thought through all the corner cases, and would definitely prefer the option to not send. The thing that turned me on this was the fact that the request is going to the same origin. If the site wants to track you across the redirect, it can just use a cookie. As long as any AltSvc state shares fate with cookies, this is only a case of clients helping servers with some tricky deployment issues; the client isn't actually giving anything away (unless you count the opportunity cost of the bytes, that is).
Received on Wednesday, 21 January 2015 17:35:49 UTC