Re: [w3ctag/design-reviews] Signed Exchanges (#235)

Per today's F2F, @plinss notes that the list of state-changing header feels in [Section 4.1](https://tools.ietf.org/html/draft-yasskin-http-origin-signed-responses-03#section-4.1) doesn't currently include `Public-Key-Pins`, `Strict-Transport-Security`, or `Expect-CT`. Is that an oversight?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/235#issuecomment-379423243

Received on Saturday, 7 April 2018 01:39:27 UTC