ISSUE-181: Should there be an authoring practice suggesting http/https URI space consistency [wsc-xit]

ISSUE-181: Should there be an authoring practice suggesting http/https URI space consistency [wsc-xit]

http://www.w3.org/2006/WSC/track/issues/

Raised by: Thomas Roessler
On product: wsc-xit

ISSUE-123 notes that inconsistent http and https URI spaces for a single web application can break techniques used to steer users toward safer interactions.

Strawman proposal:  Let's add a section to chapter 9 which says:

<head>Offer https URIs that correspond to your http URI space</head>

Web Sites that are available under "http" and "https" URIs should design the URI spaces for these two schemes consistently.  Specifically, when users change a URI's scheme to https, they should arrive at a page that is effectively the same as the page offered through plain http.

Or maybe this should go into 9.3, Use TLS Consistently across the web site?

Received on Thursday, 17 January 2008 18:10:44 UTC