Re: [whatwg/fetch] Set the HTTPS state to 'modern' for more things (#290)

I'm thinking of solving the secure contexts issue I linked to by adding some text around where the Fetch spec has:

> If response was retrieved over HTTPS, set its HTTPS state to either "deprecated" or "modern".

In other word saying something along the lines of the following (apologies for the sloppy wording, but you get the idea):

> Also set HTTPS state to "modern" if response's URI's host component is or falls within "localhost." [RFC6761] or matches one of the CIDR notations 127.0.0.0/8 or ::1/128 [RFC4632], or the scheme of the URI is one which the user agent considers to be authenticated or has been configured as a trustworthy scheme.

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/290#issuecomment-214713882