Re: [whatwg/fetch] Clarification on CORS preflight fetches for TLS client certificates (#869) from Dana Keeler on 2019-02-11 (public-webapps-github@w3.org from February 2019)

From: Dana Keeler <notifications@github.com>
Date: Mon, 11 Feb 2019 18:07:46 +0000 (UTC)
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/issues/869/462431764@github.com>

I was asked to comment on Firefox's implementation. If I'm reading it correctly, when making CORS preflight fetches, we set a flag[1] that eventually makes its way to where we configure the handshake to not send a client certificate[2].

[1] https://hg.mozilla.org/mozilla-central/file/6f3709b38781/netwerk/protocol/http/nsCORSListenerProxy.cpp#l1462
[2] https://hg.mozilla.org/mozilla-central/file/6f3709b38781/security/manager/ssl/nsNSSIOLayer.cpp#l2278

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/869#issuecomment-462431764

Received on Monday, 11 February 2019 18:08:09 UTC