Re: [xhr] proxy-connection header from Anne van Kesteren on 2007-07-25 (public-webapi@w3.org from July 2007)

From: Anne van Kesteren <annevk@opera.com>
Date: Wed, 25 Jul 2007 15:01:52 +0200
To: "Jonas Sicking" <jonas@sicking.cc>, "Web APIs WG" <public-webapi@w3.org>
Message-ID: <op.tv0uheta64w2qv@annevk-t60.oslo.opera.com>

On Mon, 23 Jul 2007 08:37:26 +0200, Jonas Sicking <jonas@sicking.cc> wrote:
> [...]
>
> So I think we should disallow this header since we're disallowing  
> "Connection" as it might otherwise confuse proxies.

Agreed. I have not added Proxy-Authorization as setting the Authorization  
header is allowed as well. (As for the comment that Proxy-Connection is  
not a registered header: security trumps specification purity.)

-- 
Anne van Kesteren
<http://annevankesteren.nl/>
<http://www.opera.com/>

Received on Wednesday, 25 July 2007 13:02:09 UTC