Fwd: New Version Notification for draft-nottingham-site-wide-headers-01.txt

[Mark Nottingham <[e-mail]>]

FYI, updated draft.

Prettier (and latest) version available at:
  https://mnot.github.io/I-D/site-wide-headers/ <https://mnot.github.io/I-D/site-wide-headers/>

Biggest change in this revision is restricting site-wide headers to a whitelist + a prefix ("site-"). Feedback appreciated.

I talked to a number of folks about this in Seoul, and it seems like some potential implementers have a preference for a header-based approach, rather than creating a JSON data structure with semantics that diverge from headers.

This is my gut feeling too, but it could be that they were agreeing with me because I was there. Another approach is suggested by Mike West here:
  https://wicg.github.io/origin-policy/ <https://wicg.github.io/origin-policy/>

More than anything, I'd like to have a discussion about this and see if we can move forward, in one direction or another (I don't think the differences between the proposals represent insurmountable hurdles). That's because we continue to have new site-wide mechanisms defined, e.g.:
  https://tools.ietf.org/html/draft-stark-expect-ct <https://tools.ietf.org/html/draft-stark-expect-ct>

Cheers,


> Begin forwarded message:
> 
> From: [e-mail]
> Subject: New Version Notification for draft-nottingham-site-wide-headers-01.txt
> Date: 24 November 2016 at 1:20:06 pm AEDT
> To: "Mark Nottingham" <[e-mail]>
> 
> 
> A new version of I-D, draft-nottingham-site-wide-headers-01.txt
> has been successfully submitted by Mark Nottingham and posted to the
> IETF repository.
> 
> Name:		draft-nottingham-site-wide-headers
> Revision:	01
> Title:		Site-Wide HTTP Headers
> Document date:	2016-11-24
> Group:		Individual Submission
> Pages:		10
> URL:            https://www.ietf.org/internet-drafts/draft-nottingham-site-wide-headers-01.txt
> Status:         https://datatracker.ietf.org/doc/draft-nottingham-site-wide-headers/
> Htmlized:       https://tools.ietf.org/html/draft-nottingham-site-wide-headers-01
> Diff:           https://www.ietf.org/rfcdiff?url2=draft-nottingham-site-wide-headers-01
> 
> Abstract:
>   This document specifies an alternative way for Web sites to send HTTP
>   response header fields that apply to an entire origin, to improve
>   efficiency.
> 
> 
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> The IETF Secretariat
> 

--
Mark Nottingham   https://www.mnot.net/