[access-control] Access Control for Cross-site Requests

[Anne van Kesteren]

I updated the draft to include the functionality discussed during the F2F  
meeting:

  http://dev.w3.org/2006/waf/access-control/

I would appreciate suggestions for how to improve the algorithm prose and  
how to organize the draft better. It's quite clear what the processing  
model is for but the other sections don't really fit in yet. New syntax  
for authorization request responses has become:

  Access-Control: allow <*> method POST, PUT

  <?access-control allow="*" method="POST PUT"?>


--
Anne van Kesteren
<http://annevankesteren.nl/>
<http://www.opera.com/>