Re: [whatwg/fetch] Allow connection reuse for request without credentials when TLS client auth is not in use (#341)

pmeenan left a comment (whatwg/fetch#341)

> We do some early resources fetching which does not need credentials and then some requests fetch resources which do use credentials. Because we allow users to switch between different accounts (and thus credentials) it is useful to us to be able to cache resources without credentials while everything going over the same connection, ideally.

Just to be clear, are you using connection-level credentials for this (NTLM, Kerberos, TLS Client certificates) or are you talking about cookie-based credentials?

Switching in-and-out of cookie-based credentials is the common case and happens all of the time.

I'm more curious about cases where, within the same session, a given connection to a given origin switches in and out of connection-based credentials. The TLS client cert cases I'm aware of are usually machine-level identification (corporate devices attesting that they are managed and owned for example).

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/341#issuecomment-2881041705
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/issues/341/2881041705@github.com>