Re: [whatwg/fetch] HTTPS upgrades proposal (PR #1655)

@annevk commented on this pull request.



> +<div algorithm>
+<p>To <dfn>upgrade an HTTP request</dfn> given a <a for=/>request</a> <var>request</var>:
+
+<ol>
+ <li>
+  <p>If any of the following are true:
+
+  <ul>
+   <li><p><var>request</var>'s <a for="request">destination</a> is not "<code>document</code>";
+
+   <li><p><var>request</var>'s <a for="request">method</a> is not "<code>GET</code>";
+
+   <li><p><var>request</var>'s <a for="request">URL</a>'s <a for="url">scheme</a> is not
+   "<code>http</code>"; or
+
+   <li><p><var>request</var>'s <a for="request">URL</a>'s <a for="url">origin</a> is exempted from

ISPs broadcasting user identifiers in plain text is exactly why universal HTTPS matters.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/1655#discussion_r1479703813
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/pull/1655/review/1865043828@github.com>