Subject: [Unbearable] [TokenBinding/Internet-Drafts] HTTPSTB: Clarify that applications don't have to scope keys by eTLD+1 (#77)

From: balfanz <[email-masked]>
Date: Sun, 13 Nov 2016 23:03:49 -0800

While **web browsers** must scope Token Binding keys to eTLD+1s, such a rule does not necessarily apply to other apps, which are free to scope their keys differently as long as they preserve user privacy.

We should clarify that any mention of eTLD+1-based scoping applies only to web browsers.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/TokenBinding/Internet-Drafts/issues/77