- From: Adam Barth <w3c@adambarth.com>
- Date: Wed, 24 Jun 2009 22:55:10 -0700
- To: Mark Nottingham <mnot@mnot.net>
- Cc: Henrik Nordstrom <henrik@henriknordstrom.net>, "Roy T. Fielding" <fielding@gbiv.com>, Larry Masinter <LMM@acm.org>, ietf-http-wg@w3.org, Lisa Dusseault <ldusseault@commerce.net>
On Wed, Jun 24, 2009 at 10:46 PM, Mark Nottingham<mnot@mnot.net> wrote: > Do you have a spec for sec-from? http://tools.ietf.org/html/draft-abarth-origin-01 This draft addresses the technical feedback I have receive on the -00 version of the draft. As I said in the previous email, I'm going to try to reply to all the outstanding emails in the next couple of days. > And, does that imply that Origin isn't necessary? I renamed the header in the draft in order to avoid conflicting with CORS. I'm hopeful that we can convince CORS to change its use of Origin to match (because CORS has similar redirect issues). If/when that happens, we can unify the names again. Adam
Received on Thursday, 25 June 2009 05:56:09 UTC