Re: [whatwg/fetch] Proposal: Allow servers to take full responsibility for cross-origin access protection (#878)

> In/out doesn't matter.

I find it hard to argue this way. I am told that opt-in doesn’t work, that opt-out is not opt-in, I explain that it is opt-out, but then am being told the difference doesn’t matter.

So yes, the server opts for taking responsibility of cross-resource protection, just like it already has other responsibilities. What is the issue with that (given that servers are already trying to en masse)?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/878#issuecomment-471006368