Return-Path: X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D940129507 for ; Thu, 2 Feb 2017 10:14:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.22 X-Spam-Level: X-Spam-Status: No, score=-10.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-3.199, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1AgPkYjb1ikf for ; Thu, 2 Feb 2017 10:14:43 -0800 (PST) Received: from frink.w3.org (frink.w3.org [128.30.52.56]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F27B71294F1 for ; Thu, 2 Feb 2017 10:14:42 -0800 (PST) Received: from lists by frink.w3.org with local (Exim 4.80) (envelope-from ) id 1cZLrD-0003mg-1J for ietf-http-wg-dist@listhub.w3.org; Thu, 02 Feb 2017 18:11:43 +0000 Resent-Date: Thu, 02 Feb 2017 18:11:43 +0000 Resent-Message-Id: Received: from mimas.w3.org ([128.30.52.79]) by frink.w3.org with esmtps (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from ) id 1cZLr5-0003lv-JF for ietf-http-wg@listhub.w3.org; Thu, 02 Feb 2017 18:11:35 +0000 Received: from mail-cys01nam02on0096.outbound.protection.outlook.com ([104.47.37.96] helo=NAM02-CY1-obe.outbound.protection.outlook.com) by mimas.w3.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1cZLqy-0004r7-TP for ietf-http-wg@w3.org; Thu, 02 Feb 2017 18:11:30 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=mrbaTblAP29cbn3oLK5tF3HpAfzkoEThlIbbrPS7mGc=; b=RR0p+n219Gpvkw21I2Yz5UmOAdd3oJxGG16U6TMKRtQKyajX5h1Eemuvs0srYrdeTklgj0w1U/3vsdyDdniOeoKGvRhk7ZiPrv5v1h2IrhHFs0OQN5yUy+PdkYfzExD+KGh7iiRJF7x0Zw1lT/drF+kEpXZG0+PTLB+DNWtdHZA= Received: from BN6PR03MB2708.namprd03.prod.outlook.com (10.173.144.15) by BN6PR03MB2706.namprd03.prod.outlook.com (10.173.144.13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.860.13; Thu, 2 Feb 2017 18:10:59 +0000 Received: from BN6PR03MB2708.namprd03.prod.outlook.com ([10.173.144.15]) by BN6PR03MB2708.namprd03.prod.outlook.com ([10.173.144.15]) with mapi id 15.01.0860.026; Thu, 2 Feb 2017 18:11:00 +0000 From: Mike Bishop To: Stefan Eissing , Mark Nottingham CC: Martin Thomson , HTTP Working Group Thread-Topic: ORIGIN - suggested changes Thread-Index: AQHSfFgO/bqKwaIWAE6FT+rlKADgAqFT7oyAgAD7vACAAALlAIAAAhyAgAC8vICAAFp44A== Date: Thu, 2 Feb 2017 18:10:59 +0000 Message-ID: References: <5D2EB826-204B-44FC-AB42-B0BBECF9AE62@mnot.net> <373E9285-B023-4D42-A749-368649E34252@mnot.net> <1211BE0D-7629-4EEF-BF64-90EFFB84A9B9@greenbytes.de> In-Reply-To: <1211BE0D-7629-4EEF-BF64-90EFFB84A9B9@greenbytes.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Bishop@microsoft.com; x-originating-ip: [131.107.160.139] x-ms-office365-filtering-correlation-id: 86792d19-9758-4a2c-66f5-08d44b96d795 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081); SRVR:BN6PR03MB2706; x-microsoft-exchange-diagnostics: 1; BN6PR03MB2706; 7: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 x-o365eop-header: O365_EOP: Allow for Unauthenticated Relay x-o365ent-eop-header: Message processed by - O365_ENT: Allow from ranges (Engineering ONLY) x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040375)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026)(61426038)(61427038)(6041248)(20161123564025)(20161123562025)(20161123555025)(20161123558025)(20161123560025)(6072148)(6042181); SRVR:BN6PR03MB2706; BCL:0; PCL:0; RULEID:; SRVR:BN6PR03MB2706; x-forefront-prvs: 02065A9E77 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(13464003)(24454002)(199003)(189002)(377454003)(7736002)(39060400001)(3846002)(2906002)(50986999)(4326007)(86612001)(305945005)(2900100001)(74316002)(76176999)(3660700001)(122556002)(229853002)(53936002)(189998001)(6116002)(102836003)(97736004)(77096006)(38730400001)(6436002)(6506006)(5001770100001)(54356999)(8990500004)(106116001)(2950100002)(101416001)(105586002)(10090500001)(3280700002)(6306002)(10290500002)(93886004)(99286003)(15974865002)(81166006)(86362001)(81156014)(92566002)(25786008)(9686003)(55016002)(8936002)(54906002)(66066001)(8676002)(68736007)(33656002)(5660300001)(7696004)(106356001)(5005710100001)(18886075002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR03MB2706; H:BN6PR03MB2708.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Feb 2017 18:10:59.6820 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR03MB2706 Received-SPF: pass client-ip=104.47.37.96; envelope-from=Michael.Bishop@microsoft.com; helo=NAM02-CY1-obe.outbound.protection.outlook.com X-W3C-Hub-Spam-Status: No, score=-4.6 X-W3C-Hub-Spam-Report: AWL=-1.996, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-1.143, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, W3C_NW=0.5 X-W3C-Scan-Sig: mimas.w3.org 1cZLqy-0004r7-TP 35e328877da6aaf75a856e321cdf62eb X-Original-To: ietf-http-wg@w3.org Subject: RE: ORIGIN - suggested changes Archived-At: Resent-From: ietf-http-wg@w3.org X-Mailing-List: archive/latest/33427 X-Loop: ietf-http-wg@w3.org Resent-Sender: ietf-http-wg-request@w3.org Precedence: list List-Id: List-Help: List-Post: List-Unsubscribe: VGhhdCB1c2Ugb2YgMV8xX1JFUVVJUkVEIHN1cnByaXNlcyBtZTsgSSB3b3VsZCB0aGluayA0MjEg d291bGQgYmUgdGhlIGFwcHJvcHJpYXRlIHJlc3BvbnNlIHRoZXJlLCB0b28sIHNpbmNlIHRoZSBy ZXF1ZXN0IG5lZWRzIHRvIGJlIG1hZGUgb24gYSBzZXBhcmF0ZSAoYnV0IHN0aWxsIEhUVFAvMikg Y29ubmVjdGlvbi4NCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IFN0ZWZhbiBF aXNzaW5nIFttYWlsdG86c3RlZmFuLmVpc3NpbmdAZ3JlZW5ieXRlcy5kZV0gDQpTZW50OiBUaHVy c2RheSwgRmVicnVhcnkgMiwgMjAxNyA0OjQ2IEFNDQpUbzogTWFyayBOb3R0aW5naGFtIDxtbm90 QG1ub3QubmV0Pg0KQ2M6IE1hcnRpbiBUaG9tc29uIDxtYXJ0aW4udGhvbXNvbkBnbWFpbC5jb20+ OyBIVFRQIFdvcmtpbmcgR3JvdXAgPGlldGYtaHR0cC13Z0B3My5vcmc+DQpTdWJqZWN0OiBSZTog T1JJR0lOIC0gc3VnZ2VzdGVkIGNoYW5nZXMNCg0KDQo+IEFtIDAyLjAyLjIwMTcgdW0gMDI6MzAg c2NocmllYiBNYXJrIE5vdHRpbmdoYW0gPG1ub3RAbW5vdC5uZXQ+Og0KPiANCj4gDQo+PiBPbiAy IEZlYiAyMDE3LCBhdCAxMjoyMyBwbSwgTWFydGluIFRob21zb24gPG1hcnRpbi50aG9tc29uQGdt YWlsLmNvbT4gd3JvdGU6DQo+PiANCj4+IE9uIDIgRmVicnVhcnkgMjAxNyBhdCAxMDoxMiwgTWFy ayBOb3R0aW5naGFtIDxtbm90QG1ub3QubmV0PiB3cm90ZToNCj4+PiBJIGRvbid0IGJ1eSB0aGUg YXJndW1lbnQgdGhhdCByZW1vdmFsIGl0c2VsZiBhZGRzIGNvbXBsZXhpdHkuIEltcGxlbWVudGF0 aW9ucyBhbHJlYWR5IG5lZWQgdG8gcmVtZW1iZXIgd2hhdCBvcmlnaW5zIHRoZXkgcmVjZWl2ZWQg YSA0MjEgZm9yLCBzbyB0aGV5IGFscmVhZHkgaGF2ZSB0aGUgY29uY2VwdCBvZiBvcmlnaW4gc2V0 IHJlbW92YWwuDQo+PiANCj4+IFdlbGwsIHlvdSBqdXN0IGVzdGFibGlzaGVkIHdoeSBpdCBtaWdo dCBiZSB1bm5lY2Vzc2FyeS4gIFRoZSBnYWluIA0KPj4gaGVyZSBpcyBpbiB0aGUgY2xpZW50IG5v dCBzZW5kaW5nIGEgcmVxdWVzdCB0byB0aGUgd3JvbmcgcGxhY2UuICBCdXQgDQo+PiBpZiB0aGlz IGlzIHJhcmUgZW5vdWdoLCB0aGVuIHRoYXQgY29zdCBpcyBwcm9iYWJseSBiZWFyYWJsZS4NCj4g DQo+IFJpZ2h0LCBidXQgdGhlIHdob2xlIHBvaW50IG9mIE9SSUdJTiBpcyB0byBhdm9pZCB0aG9z ZSBzaXR1YXRpb25zLiANCj4gDQo+IA0KPj4gVGhlICJldmVyeXRoaW5nIGV4Y2VwdCB0aG9zZSIg Y2FzZSBkb2Vzbid0IGNvbmNlcm4gbWUgdGhhdCBtdWNoLg0KPj4gSWtub3cgaXQncyByZWxhdGl2 ZWx5IGNvbW1vbiwgYnV0IGl0IGlzIGZhaXJseSByYXJlIHRoYXQgdGhlIHNldCBvZiANCj4+IG9y aWdpbnMgdGhhdCBhcmUgdXNlZCBpcyBub3QgZWFzaWx5IGVudW1lcmFibGUsIG9yIGluY3JlbWVu dGFsbHkgDQo+PiBkaXNjb3ZlcmFibGUuDQo+IA0KPiBTcG9rZW4gbGlrZSBhIHRydWUgYnJvd3Nl ciB2ZW5kb3IgOikNCj4gDQo+IEl0J2QgYmUgZ29vZCB0byBnZXQgYSBiaXQgbW9yZSBkYXRhIGhl cmUgZnJvbSBzZXJ2ZXItc2lkZSBmb2xrcy4gQW55b25lIHNoYXJlIHRoaXMgY29uY2Vybj8gSSBu b3RlIHRoYXQgTmljayBzZWVtcyB0byBiZSBPSyB3aXRoIGl0Lg0KDQpUaGUgZmVlZGJhY2sgZnJv bSBBcGFjaGUgaHR0cGQgdXNlcnMgd2hpY2ggaGF2ZSB3aWxkY2FyZCBjZXJ0IHNldHVwcyBpczog ZG8gbm90IGVuYWJsZSBoMi4gDQoNCkZyb20gdGhlaXIgUG9WLCB0aGV5IGhhdmUgYSBjb25maWcg cnVubmluZyB3aXRoIEhUVFAvMS4xIGZvciB5ZWFycyBub3csIGVuYWJsZWQgaDIgYW5kIGFsbCBo ZWxsIGJyb2tlIGxvc2UuIFNvbWUgc2l0ZXMgd29yaywgc29tZSBkb24ndCBhbmQgdGhhdCBhbHNv IGRlcGVuZHMgb24gd2hhdCB5b3VyIGJyb3dzZXIgZGlkIGJlZm9yZSAqKS4gVGhleSBkbyBub3Qg d2FudCB0byBjaGFuZ2UgdGhlaXIgc2V0dXBzLCB0aGV5IGV4cGVjdCBoMiB0byBqdXN0IHdvcmsg b3IgdGhleSB3aWxsIG5vdCB1c2UgaXQuIA0KDQpDdXJyZW50bHksIE9SSUdJTiBmcmFtZSBpcyBu b3Qgc3VwcG9ydGVkIGJ5IGh0dHBkLiBNeSBleHBlY3RhdGlvbiBpcywgb25jZSBhZGRlZCwgYnkg ZGVmYXVsdCB0aGUgc2VydmVyIHdvdWxkIHNlbmQgYW4gZW1wdHkgT1JJR0lOIGZyYW1lLCBpbXBs eWluZyB0aGF0IHRoZSBjdXJyZW50IGNvbm5lY3Rpb24gc2hvdWxkIG9ubHkgYmUgdXNlZCBmb3Ig dGhlIFNOSSBob3N0LiBJZiBJIHJlYWQgdGhlIGN1cnJlbnQgc3BlYyBjb3JyZWN0bHkuIChBbmQg YnR3LiB3aGljaCBicm93c2VyIHBsYW5zIHRvIHN1cHBvcnQgaXQ/KQ0KDQpBZGRpdGlvbmFsbHks IGhhdmluZyBjb25maWd1cmF0aW9uIGRpcmVjdGl2ZXMgcGVyIHZpcnR1YWwgaG9zdCB3aGVyZSBh biBhZG1pbiBjYW4gYWRkIG90aGVyIE9SSUdJTnMgZm9yIGNvbm5lY3Rpb25zIHRvIHRoaXMgdmVy eSBob3N0LCBzZWVtcyBhIGdvb2QgZmlyc3Qgc3RlcC4gTXkgZ29hbCBpcyB0byBoYXZlIHRoZSBk ZWZhdWx0ICJqdXN0IHdvcmsiIGluIGNhc2Ugb2Ygd2lsZGNhcmQgY2VydHMgYW5kIHJlcXVpcmUg aW50ZW50aW9uYWwgY29uZmlndXJhdGlvbiBieSB0aGUgYWRtaW4gdG8gb3B0aW1pemUgZnJvbSB0 aGVyZS4NCg0KVGhlIGZlZWRiYWNrIEkgYW0gcmVjZWl2aW5nIG9uIDQyMSByZXNwb25zZSBhbmQg SFRUUF8xXzFfUkVRVUlSRUQgaGFuZGxpbmcgaXMgbm90IGdyZWF0LiBBbmQgaXQncyBkaWZmaWN1 bHQgdG8gZGVidWcgZm9yIG1vc3QgcGVvcGxlLg0KDQpDaGVlcnMsIFN0ZWZhbg0KDQoqKSBodHRw ZCByZXBsaWVzIHdpdGggSFRUUF8xXzFfUkVRVUlSRUQgd2hlbiBhIHN0cmVhbSBlbmNvdW50ZXJz IGEgVExTIHNldHVwIGZvciBhIHNpdGUgdGhhdCBpcyBub3QgdGhlIHNhbWUgYXMgdGhlIGN1cnJl bnQgY29ubmVjdGlvbi4NCg0KPiBDaGVlcnMsDQo+IA0KPiAtLQ0KPiBNYXJrIE5vdHRpbmdoYW0g ICBodHRwczovL3d3dy5tbm90Lm5ldC8NCj4gDQo+IA0KDQpTdGVmYW4gRWlzc2luZw0KDQo8Z3Jl ZW4vPmJ5dGVzIEdtYkgNCkhhZmVuc3RyYXNzZSAxNg0KNDgxNTUgTcO8bnN0ZXINCnd3dy5ncmVl bmJ5dGVzLmRlDQoNCg0K