- From: Martin Thomson <martin.thomson@gmail.com>
- Date: Tue, 12 Jan 2016 13:09:16 +1100
- To: Kyle Rose <krose@krose.org>
- Cc: Julian Reschke <julian.reschke@gmx.de>, Hervé Ruellan <herve.ruellan@crf.canon.fr>, HTTP Working Group <ietf-http-wg@w3.org>
On 12 January 2016 at 11:49, Kyle Rose <krose@krose.org> wrote: > "Clients MUST NOT use unauthenticated alternative services with a host > that is different from the origin or authenticated alternative > services with a host that does not authenticate itself as the origin." I think that the second part is invariant, the first is an additional limitation on the use of alternative service advertisements that aren't properly authenticated.
Received on Tuesday, 12 January 2016 02:09:48 UTC