Definition of secure origin in MIX and POWER

• From: Francois Marier <francois@mozilla.com>
• Date: Wed, 08 Jul 2015 16:43:26 +0200
• To: public-webappsec@w3.org
• Message-ID: <559D370E.1020001@mozilla.com>

Is there a reason why the mixed content spec doesn't use the same
definition of "potentially secure origin" as the powerful features spec?

In particular, "http://localhost" is potentially secure in POWER but not
in MIX.

Francois

Received on Wednesday, 8 July 2015 14:43:58 UTC