Re: CORS Last Call status/plans? [Was: Re: [UMP] Request for Last Call]

On Mon, Apr 19, 2010 at 11:39 AM, Jonas Sicking <jonas@sicking.cc> wrote:
> On Mon, Apr 19, 2010 at 11:30 AM, Maciej Stachowiak <mjs@apple.com> wrote:
>>
>> On Apr 19, 2010, at 10:06 AM, Tyler Close wrote:
>>
>>>     Uniform-Headers = "Uniform-Headers" ":" ( "*" | #field-name )
>>
>> [...]
>>
>>> Are Apple and/or Firefox interested in implementing the above? Does
>>> mnot or other HTTP WG members consider the above a satisfactory
>>> solution to ISSUE-90?
>>
>> I'm interested in implementing a feature along these lines if it goes into
>> CORS. If it's UMP-only, then no, and I would object that it violates the
>> subset relation.
>>
>> I am also not sure the * value is a good idea. It is tempting in its
>> convenience but seems likely to cause unintended consequences.
>
> I agree with everything Maciej said.
>
> This time.

Thanks for the quick response time.

If this is a good feature, shouldn't the pressure be on CORS to adopt
it, rather than for UMP to drop it? Otherwise, it might seem politics
are overriding technical virtue.

--Tyler

-- 
"Waterken News: Capability security on the Web"
http://waterken.sourceforge.net/recent.html

Received on Monday, 19 April 2010 18:48:28 UTC