Re: [whatwg/fetch] Clarification on CORS preflight fetches for TLS client certificates (#869)

> If this is the case then in the long term, will non-preflighted requsts be removed entirely?

No, they would behave like WebSockets do: if you’ve previously selected credentials for the host (e.g. navigation), then they’re available to be reused. If the user has not already provided credentials-that-require-interaction, however, they won’t be sent/the fetch would raise it as a network error (e.g. as requests through proxies can also do)

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/869#issuecomment-787521466

Received on Sunday, 28 February 2021 20:55:55 UTC