Re: Do we need to rename the Origin header?

On Jan 13, 2009, at 7:31 AM, Anne van Kesteren wrote:

> On Tue, 13 Jan 2009 01:31:49 +0100, Jonas Sicking <jonas@sicking.cc>  
> wrote:
>> My suggestion is to rename "Origin" to "Access-Control-Request- 
>> Origin"
>> or "Access-Control-Origin" if possible (depends on where current
>> implementers are in their ship schedule), or that we request that the
>> CSRF protection header be renamed to something other than "Origin".
>
> I'm fine with renaming it to Access-Control-Request-Origin as far as  
> the Access Control draft is concerned.
>
> Maciej, Sam, Adam?

I am also fine with renaming it to Access-Control-Request-Origin.  I  
think the purposes are different enough that it wont be confusing.

- Sam

Received on Tuesday, 13 January 2009 23:40:21 UTC