On 13. Jun 2021, at 04:22, Michael Richardson <[email protected]> wrote: > > "another web origin" --- I guess I don't know what this means.
See RFC 6454 "The Web Origin Concept”. In short, scheme + authority. > Does it mean redirecting from https://one.example/foo to > https://two.example/bar, Different origins https://one.example vs. https://two.example > or does it refer to https://one.example/foo to https://one.example/bar > etc. Same origin https://one.example I don’t like the term that much, but it is in wide use in the combination “Same origin principle”. In RFC 7252, we use “Origin server” to identify the serving endpoint. (Of course, “endpoint" has been hijacked as a needless synonym of “resource” in OAuth.) Somebody should write a Web terminology glossary :-) Grüße, Carsten _______________________________________________ Anima mailing list [email protected] https://www.ietf.org/mailman/listinfo/anima
