Re: [websec] #60: Well Known URIs vs Response Headers

2013-07-31 Thread Daniel Kahn Gillmor
On 07/31/2013 11:22 PM, Trevor Perrin wrote: > If other people want to write their own specs to add data into it, > that's great - it's a convenient single place for browsers and web > crawlers to find security policy for a site. I'm finding myself more and more convinced by the well-known URI su

Re: [websec] #60: Well Known URIs vs Response Headers

2013-07-31 Thread Joseph Bonneau
> This issue turned out to be more contentious that I had expected. We've > had two people in support of the change, in addition to one response that > seems to indicate support for such a change, and Mark's remarks at the > meeting, which were also kind-of, sort-of in support of such a change. >