Re: [XHR2] Feedback on sec-* headers

2011-02-24 Thread Richard L. Barnes
On Feb 24, 2011, at 6:53 AM, Anne van Kesteren wrote: > On Tue, 22 Feb 2011 20:19:33 +0100, Richard L. Barnes wrote: >> Mark's XHR2-Secure proposal satisfies the requirement by explicitly listing >> the headers that are secure (I'll assume the enumeration sta

[XHR2] Feedback on sec-* headers

2011-02-22 Thread Richard L. Barnes
Jumping over to this list (hi, I'm new here!) from another list. To recap: I had chimed in in support of Mark's proposal, and Anne said "It fails to meet the goal of Sec-", with a pointer to this thread. It seems like the high-level requirement is for the recipient of an HTTP request to know wh

Re: [XHR2] Feedback on sec-* headers

2011-02-22 Thread Richard L . Barnes
[sorry if this is a repeat, sent first copy in the process of joining the list] Jumping over to this list (hi, I'm new here!) from another list. To recap: I had chimed in in support of Mark's proposal, and Anne said "It fails to meet the goal of Sec-", with a pointer to this thread. It seems l