Re: [MIX] Is origin an authenticated origin? from Anne van Kesteren on 2014-10-23 (public-webappsec@w3.org from October 2014)

From: Anne van Kesteren <annevk@annevk.nl>
Date: Thu, 23 Oct 2014 15:35:01 +0200
To: Mike West <mkwst@google.com>
Cc: WebAppSec WG <public-webappsec@w3.org>
Message-ID: <CADnb78iq-OrJ9Zwwc+DPhBbEYWFM2LOFv1V3Avu_U7fDAA2vgQ@mail.gmail.com>

On Thu, Oct 23, 2014 at 3:32 PM, Mike West <mkwst@google.com> wrote:
> Chrome simply refuses to connect to anything it considers weak or
> deprecated, which simplifies the mixed content logic dramatically.

Right, you can just check for "https" / "wss". Is there a browser that
does not follow this approach?


-- 
https://annevankesteren.nl/

Received on Thursday, 23 October 2014 13:35:32 UTC