Re: [websec] WG Last Call on draft-ietf-websec-strict-transport-sec-06 until April-9

[Paul Hoffman <[e-mail]>]

On Mar 19, 2012, at 2:35 AM, Julian Reschke wrote:

> I'd like to point out that I still think my concerns over the inconsistent use of quoted-string (<http://www.ietf.org/mail-archive/web/websec/current/msg01044.html>) are valid and not addressed; and I think they should be before you go to IETF LC.
> 
> Note that since we had a long discussion with Adam Barth about quoted-string, Chrome has started supporting it in Content-Disposition, and a similar fix for Content-Type is in preparation (<http://code.google.com/p/chromium/issues/detail?id=103361#c7>).
> 
> In <http://www.ietf.org/mail-archive/web/websec/current/msg01045.html> Jeff points out that Firefox doesn't support quoted-string in all parameters, but IMHO that's a bogus argument because it currently doesn't support q-s *at all*; so it will need to be fixed to conform to the current spec as well (see <https://bugzilla.mozilla.org/show_bug.cgi?id=718409>).

+1. This is an important topic.

--Paul Hoffman