[MIX] Is origin an authenticated origin? from Anne van Kesteren on 2014-10-23 (public-webappsec@w3.org from October 2014)

From: Anne van Kesteren <annevk@annevk.nl>
Date: Thu, 23 Oct 2014 13:43:56 +0200
To: WebAppSec WG <public-webappsec@w3.org>
Message-ID: <CADnb78ho+3kO40vDJM4D6xDmPsWfWNk30mcvJM5Ctws3Gc=S0A@mail.gmail.com>

When reviewing service workers I found this definition to be lacking.
It talks about origins but then it refers
https://w3c.github.io/webappsec/specs/mixedcontent/#insecure-origin
which starts talking about resources. We don't know about resources in
an algorithm that only takes an origin as parameter.


-- 
https://annevankesteren.nl/

Received on Thursday, 23 October 2014 11:44:22 UTC