Re: [whatwg/fetch] Send "null" Origin header on cross-origin .onion requests (PR #1351) from Francois Marier on 2021-11-10 (public-webapps-github@w3.org from November 2021)

From: Francois Marier <notifications@github.com>
Date: Wed, 10 Nov 2021 14:57:35 -0800
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/pull/1351/c965819448@github.com>

> whether this should be optional somehow or conditional upon .onion support

On this specific point, I would suggest the answer is no, it should be always ON because there's no easy way for the browser to know that the SOCKS5 proxy it's using is the Tor daemon.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/1351#issuecomment-965819448

Received on Wednesday, 10 November 2021 22:57:47 UTC