W3C home > Mailing lists > Public > public-webappsec@w3.org > October 2014

Re: [MIX] Is origin an authenticated origin?

From: Anne van Kesteren <annevk@annevk.nl>
Date: Thu, 23 Oct 2014 15:35:01 +0200
Message-ID: <CADnb78iq-OrJ9Zwwc+DPhBbEYWFM2LOFv1V3Avu_U7fDAA2vgQ@mail.gmail.com>
To: Mike West <mkwst@google.com>
Cc: WebAppSec WG <public-webappsec@w3.org>
On Thu, Oct 23, 2014 at 3:32 PM, Mike West <mkwst@google.com> wrote:
> Chrome simply refuses to connect to anything it considers weak or
> deprecated, which simplifies the mixed content logic dramatically.

Right, you can just check for "https" / "wss". Is there a browser that
does not follow this approach?


-- 
https://annevankesteren.nl/
Received on Thursday, 23 October 2014 13:35:32 UTC

This archive was generated by hypermail 2.3.1 : Monday, 23 October 2017 14:54:07 UTC