Re: Use case - John and Jane

On Fri, Mar 22, 2013 at 4:57 PM, Ryan Sleevi <sleevi@google.com> wrote:
>
>  Scheme is either HTTP or HTTPS. An origin accessed over HTTP is *not*
> the same as an origin accessed via HTTPS - because they are different
> schemes.
>

Ryan,

I generally agree with your argument here, but I wanted to observe
out that there has been some discussion of mechanisms for
authenticating JS delivered over HTTP (e.g., script-hash).

I don't think this changes your basic point though.

-Ekr