Re: [whatwg/fetch] Update Fetch to support Token Binding. (#325)

vanupam commented on this pull request.



> +of the Token Binding over HTTP spec [[TOKBIND-HTTPS]].
+
+By setting the <code>Include-Referred-Token-Binding-ID</code>
+<a for=response>header</a> to "<code>true</code>",
+the <a for=request>origin</a> that sends the
+redirect <a for=/>response</a> tells the user agent to disclose the
+<a for=/>token binding ID</a> used by the user agent with that
+<a for=request>origin</a> to the target<a for=request>origin</a> as a
+<a for=/>referred token binding ID</a> in the <a for=/>Token Binding Message</a> sent to the target server.
+
+
+<h4 id=computing-token-binding-header-value>Computing a Token Binding Header Value</h4>
+<p>If the user agent supports <a for=/>Token Binding</a>,
+build a <code>Sec-Token-Binding</code> <a for=/>header</a>
+for a <a for=/>request</a> <var>httpRequest</var> using the Token Binding key store by running
+these substeps:

It returns a header's value.
Updated to reflect that.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/325#discussion_r106495716