Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[6265bis] Align on HTML terminology for origins #1337

Closed
miketaylr opened this issue Dec 4, 2020 · 5 comments
Closed

[6265bis] Align on HTML terminology for origins #1337

miketaylr opened this issue Dec 4, 2020 · 5 comments
Labels

Comments

@miketaylr
Copy link
Collaborator

miketaylr commented Dec 4, 2020

It seems desirable to align with HTML and use tuple origin instead of "scheme/host/port triple" (from https://tools.ietf.org/html/rfc6454).

See https://github.com/httpwg/http-extensions/pull/1324/files#r530145898 and https://greenbytes.de/tech/webdav/draft-ietf-httpbis-semantics-12.html#origin for related discussion.

cf. mikewest/cookie-incrementalism#3 (comment)

(edit: updated to point to multi-page version of HTML, apologies for linking the single-page one!)

@reschke
Copy link
Contributor

reschke commented Dec 4, 2020

Unless there's a problem with it, it might be better to use http-core's definition (if there is a problem with it, now would be a good time to raise an issue)

@mnot mnot added the 6265bis label Dec 6, 2020
@royfielding
Copy link
Member

The tuple origin concept is an extension (or limitation) of permissions associated with same origin beyond what is considered the origin. HTTP core only defines origin, which is consistent with the current text in WHATWG html, and would still be consistent if you refer to the html tuple concept in Cookies.

@miketaylr
Copy link
Collaborator Author

I think it would also be a win for clarity in 6265bis if in place of globally unique identifier we used HTML's opaque origin. AFAICT, http-core doesn't have a mechanism defined for this.

@miketaylr
Copy link
Collaborator Author

It sounds like there are no objections, so I will write a PR (once #1348 is merged, to avoid conflicts for some of the usage of "globally unique identifier".

@englehardt
Copy link
Contributor

It sounds like there are no objections, so I will write a PR (once #1348 is merged, to avoid conflicts for some of the usage of "globally unique identifier".

SGTM

miketaylr added a commit to miketaylr/http-extensions that referenced this issue Feb 23, 2021
miketaylr added a commit to miketaylr/http-extensions that referenced this issue Feb 23, 2021
miketaylr added a commit to miketaylr/http-extensions that referenced this issue Feb 23, 2021
miketaylr added a commit to miketaylr/http-extensions that referenced this issue Feb 23, 2021
miketaylr added a commit to miketaylr/http-extensions that referenced this issue Feb 23, 2021
miketaylr added a commit to miketaylr/http-extensions that referenced this issue Feb 23, 2021
miketaylr added a commit to miketaylr/http-extensions that referenced this issue Feb 23, 2021
miketaylr added a commit to miketaylr/http-extensions that referenced this issue Feb 23, 2021
miketaylr added a commit to miketaylr/http-extensions that referenced this issue Feb 23, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

No branches or pull requests

5 participants