Re: [fetch] Integrating support for PasswordCredential objects. (#237)

> So is the intention that "attached-credential" means "include" + Credential? There's no way to get "omit" + Credential? Will we never want that?

I think we can basically consider a `PasswordCredential` object as a "credential", just as we would cookies, etc. Introducing a mode where we'd send one but not the other doesn't seem like it would be useful, as sending credentials is a fairly clear signal that you're trying to authenticate your current session, and that requires sending the state you currently have (session id, etc), and accepting any state that the server returns (auth cookie, etc).

---
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/237#issuecomment-194318035