ORIGIN Frame document

Mark Nottingham <mnot@mnot.net> Mon, 21 November 2016 02:54 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost []) by ietfa.amsl.com (Postfix) with ESMTP id 03C6012947E for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sun, 20 Nov 2016 18:54:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.398
X-Spam-Status: No, score=-8.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.497, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([]) by localhost (ietfa.amsl.com []) (amavisd-new, port 10024) with ESMTP id Xk1GS-iLDHC1 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sun, 20 Nov 2016 18:54:34 -0800 (PST)
Received: from frink.w3.org (frink.w3.org []) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9FF0127A91 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Sun, 20 Nov 2016 18:54:34 -0800 (PST)
Received: from lists by frink.w3.org with local (Exim 4.80) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1c8ehB-0006mx-Mm for ietf-http-wg-dist@listhub.w3.org; Mon, 21 Nov 2016 02:51:01 +0000
Resent-Date: Mon, 21 Nov 2016 02:51:01 +0000
Resent-Message-Id: <E1c8ehB-0006mx-Mm@frink.w3.org>
Received: from titan.w3.org ([]) by frink.w3.org with esmtps (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from <mnot@mnot.net>) id 1c8eh6-0006l7-4y for ietf-http-wg@listhub.w3.org; Mon, 21 Nov 2016 02:50:56 +0000
Received: from fallback-out2.mxes.net ([] helo=fallback-in2.mxes.net) by titan.w3.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from <mnot@mnot.net>) id 1c8egz-0008NQ-SO for ietf-http-wg@w3.org; Mon, 21 Nov 2016 02:50:50 +0000
Received: from mxout-07.mxes.net (mxout-07.mxes.net []) by fallback-in2.mxes.net (Postfix) with ESMTP id CEC052FDC28 for <ietf-http-wg@w3.org>; Sun, 20 Nov 2016 21:42:05 -0500 (EST)
Received: from [] (unknown []) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 7588F22E257; Sun, 20 Nov 2016 21:41:21 -0500 (EST)
From: Mark Nottingham <mnot@mnot.net>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
Message-Id: <A19D41B8-F56E-481F-A24D-3E4C20553C81@mnot.net>
Date: Mon, 21 Nov 2016 13:41:18 +1100
Cc: Patrick McManus <mcmanus@ducksong.com>
To: HTTP Working Group <ietf-http-wg@w3.org>
X-Mailer: Apple Mail (2.3251)
Received-SPF: pass client-ip=; envelope-from=mnot@mnot.net; helo=fallback-in2.mxes.net
X-W3C-Hub-Spam-Status: No, score=-8.1
X-W3C-Hub-Spam-Report: AWL=1.543, BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, W3C_AA=-1, W3C_DB=-1, W3C_IRA=-1, W3C_IRR=-3, W3C_WL=-1
X-W3C-Scan-Sig: titan.w3.org 1c8egz-0008NQ-SO 3a12beaba5057e333aeacfcc0a985011
X-Original-To: ietf-http-wg@w3.org
Subject: ORIGIN Frame document
Archived-At: <http://www.w3.org/mid/A19D41B8-F56E-481F-A24D-3E4C20553C81@mnot.net>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/32937
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

In the Seoul meeting, we seemed to get agreement in the room to stop work on the ORIGIN Frame document, in favour of a new SETTING that tells the client to restrict the connection to a single origin.

That document hasn't emerged yet, but we can still park the ORIGIN document for the time being.

Please respond to the list if you have any concerns.

Mark Nottingham   https://www.mnot.net/