Expect-CT field name deprecation

• From: Mark Nottingham <mnot@mnot.net>
• Date: Wed, 13 Dec 2023 07:08:14 +1100
• To: HTTP Working Group <ietf-http-wg@w3.org>
• Cc: Francesca Palombini <francesca.palombini@ericsson.com>
• Message-Id: <0175C0F6-B5FD-4DBA-BBE1-1B6533575B20@mnot.net>

*with my HTTP Field Name Registry hat on*

The Expect-CT field was registered by RFC 9163, but by the time we published it, it was clear that it was a stop-gap measure; browsers were instituting a policy to always require CT.

As a result, it's been considered deprecated by implementations for a little while; e.g.:
  - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT
  - https://chromestatus.com/feature/6244547273687040

Based upon this, my intention as an Expert for the registry is to request that the IESG (as change controller) approve changing its status in the registry to 'deprecated'. 

Cheers,

--
Mark Nottingham   https://www.mnot.net/

Received on Tuesday, 12 December 2023 20:08:26 UTC