Re: Errata for The Web Origin Concept

On Fri, Jun 8, 2012 at 12:31 AM, Anne van Kesteren <annevk@annevk.nl> wrote:
> Not sure where http://tools.ietf.org/html/rfc6454 is discussed these
> days, but I think we should issue an errata for the list of origins.
> In particular, I think we should not have the list of origins concept
> in the platform and only accept a single origin or null. The new
> syntax would be:
>
>  origin         = "Origin:" OWS origin-or-null OWS
>  origin-or-null = %x6E %x75 %x6C %x6C / serialized-origin
>
> It was introduced for CORS, but we decided not to use it there. I
> don't think we want it elsewhere either. And leaving things like that
> up to choice is bad.
>
> What do you think?

Ok.  We added it for CORS to support redirects.  If you're not using
it in CORS, I don't know of any other reason for it existing.

I'm not sure how best to handle these issues from a process point of
view.  The IETF has an errata process we can try if you like.  I'm
open to other suggestions.

Adam

Received on Friday, 8 June 2012 07:42:26 UTC