Re: Fwd: http+aes URI scheme

Noah Mendelsohn wrote:
>
> I think this will likely be of interest to the TAG. A discussion has
> sprung up on uri@w3,org. Basically, the HTML5 specification is
> proposing an http+aes URI scheme. Quoting selectively from [1]
> 

I suppose there's precedent for such a scheme, had me thinking of data:
for some reason.  But, I don't believe URI is the proper solution, more
like a way to avoid solving the problem using HTTP headers.

Specifically, it's a Content-Encoding, with out-of-band decryption key.
I'm against putting this key in the HTML, HTTP headers make more sense.

-Eric