Re: [whatwg/fetch] "With Credentials" flag possibly inconsistent with web architecture (#517)

The TAG recently discussed this and various ways to avoid that extra request in the case of \*public-deauth\*, including using "Cache-Control: public" to signal that the result would be usable even if the request was with credentials.
Also the fact that \*publish-auth\* is what Tim wanted the most (but it would require a specific entry in the security section).
So I'd rather avoid closing it right now, unless you want to split in different issues for the different proposed values.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/517#issuecomment-327580191