I-D Action:draft-abarth-origin-06.txt

Internet-Drafts@ietf.org Wed, 25 November 2009 20:45 UTC

From: Internet-Drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action:draft-abarth-origin-06.txt
Content-Type: Multipart/Mixed; Boundary="NextPart"
Mime-Version: 1.0
Message-Id: <20091125204502.118053A6B4B@core3.amsl.com>
Date: Wed, 25 Nov 2009 12:45:02 -0800
Precedence: list
Reply-To: internet-drafts@ietf.org

A New Internet-Draft is available from the on-line Internet-Drafts directories.

	Title           : The Web Origin Concept
	Author(s)       : A. Barth, et al.
	Filename        : draft-abarth-origin-06.txt
	Pages           : 14
	Date            : 2009-11-25

This document defines the concept of an "origin," which is used by
web browsers to isolate content retrieved from different parties.
The origin concept is defined by a "same-origin" relation and a
serialization algorithm.  This document also defines an HTTP Origin
header, which a user agent can use to describe the security contexts
that caused the user agent to initiate an HTTP request.  HTTP servers
can use the Origin header to mitigate against Cross-Site Request
Forgery (CSRF) vulnerabilities.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-abarth-origin-06.txt

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

ftp://ftp.ietf.org/internet-drafts/draft-abarth-origin-06.txt"><ftp://ftp.ietf.org/internet-drafts/draft-abarth-origin-06.txt>

I-D Action:draft-abarth-origin-06.txt Internet-Drafts