Subject: ORIGIN - suggested changes

From: Mark Nottingham <[email-masked]>
Date: Wed, 1 Feb 2017 17:50:05 +1100

[ editor hat ]

After talking to a few people, I have a few suggested changes in a pull request:
  https://github.com/httpwg/http-extensions/pull/285/files

Basically, this:
  - Removes the requirement for a supporting client to check DNS to determine if the server is authoritative, when ORIGIN is received
  - Redefines the initial Origin Set as whatever SNI included (if anything).

I suspect some adjustments will need to be made, but I wanted to get some feedback on the ideas first.

Some people have also been talking about simplifying ORIGIN, e.g., by removing some of the set operations. I think we should talk about that on list first.

Cheers,

--
Mark Nottingham   https://www.mnot.net/