Re: [whatwg/fetch] Proposal: Allow servers to take full responsibility for cross-origin access protection (#878) from Anne van Kesteren on 2019-03-11 (public-webapps-github@w3.org from March 2019)

From: Anne van Kesteren <notifications@github.com>
Date: Mon, 11 Mar 2019 06:25:14 -0700
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/issues/878/471536745@github.com>

I could see a TLS-level assertion that the server is basically open to all kinds of connections/requests and is able to protect itself as a thing that might be workable: https://github.com/quicwg/base-drafts/issues/1993. There's a lot of risks for the server involved though as I outlined in a comment there.

For CORS itself it seems worthwhile to wait on how Origin Policy/Manifest works out.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/878#issuecomment-471536745

Received on Monday, 11 March 2019 13:25:35 UTC