[whatwg/fetch] HTTPS Upgrades (Issue #1654)

https://github.com/dadrian/https-upgrade/blob/main/explainer.md proposes a change where eligible (top level frame, GET) HTTP navigation requests are upgraded to HTTPS, and fallback to the original HTTP URL if the fetch over HTTPS fails. This prevents users from making any unnecessary insecure connections since HTTPS will always be used for sites that support it.

This change requires modifying the fetch standard by:

- Adding an “HTTPS Upgrading” algorithm that defines which types of requests should be upgraded.
- Adding a “Fallback” algorithm that defines how a failed upgrade should be handled.
- Adding a new step to Main Fetch (after the existing step 5) that optionally runs the “HTTPS Upgrading” algorithm on the request.
- Adding a new step to HTTP Fetch that optionally runs the “Fallback” algorithm.


-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1654
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/issues/1654@github.com>