Re: [websec] [Ietf-message-headers] HTTP 'Origin' permanent and provisional

Hi SM

The W3C one is from a very old document, the first draft of which dates back to 2005. Anne van Kesteren has been editing it since 2007.

The Origin header was first mentioned in the draft from September 2008. There it is sully explained.
In 2009 the name of the document was changed to "Cross-Origin Resource Sharing".
Starting with the version from July 2010, that document references the WebSec draft, and later the RFC.

I suppose the provisional header should be removed, but the now-defunct W3C group is no longer available to request this.

I'll see what can be done.

Yoav

On Feb 13, 2013, at 9:44 PM, SM <sm@resistor.net>
 wrote:

> Hi Bjoern,
> 
> [Cc to Websec as it is their document]
> 
> At 09:37 13-02-2013, Bjoern Hoehrmann wrote:
>>  http://www.iana.org/assignments/message-headers/prov-headers.html and
>> http://www.iana.org/assignments/message-headers/perm-headers.html list
>> the "Origin" header for HTTP, one per RFC 6454 and one from an earlier
>> W3C registration. Is that as it should be?
> 
> No.  IANA did what it was requested to do.  Anyway, in my opinion, it would have to be fixed (process stuff).
> 
> Regards,
> -sm
> 
> 
> 
> 
> _______________________________________________
> websec mailing list
> websec@ietf.org
> https://www.ietf.org/mailman/listinfo/websec
> 
> Email secured by Check Point