Re: [whatwg/fetch] Stop saying WebSocket auth is disallowed (#761)

ricea commented on this pull request.



> @@ -6301,12 +6301,11 @@ therefore not shareable, a WebSocket connection is very close to identical to an
 <p><dfn>Fail the WebSocket connection</dfn> and <dfn>the WebSocket connection is established</dfn>
 are defined by The WebSocket Protocol. [[!WSP]]
 
-<p class=warning>The reason redirects are not followed, HTTP authentication will not function, and
-this handshake is generally restricted is because that could introduce serious security problems in

> Doesn't it codify those restrictions already? 

I'm planning to write up my analysis of what I think the existing specified restrictions are, but I'm buried in a pile of other stuff. Sorry for the delay.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/761#discussion_r195426911