http-extensions

http-extensions copied to clipboard

Add SF-based Authorization and WWW-Authenticate headers

15

This seems like another good candidate for a structured format. Maybe something we can add to the [retrofitted structured headers draft](https://httpwg.org/http-extensions/draft-ietf-httpbis-retrofit.html) as a new set of mapped fields?

chris-wood

This PR is a WIP while waiting on data to show us that this is the correct approach. Until https://github.com/httpwg/http-extensions/pull/1348, the spec mistakenly didn't define the same-site-ness to include the...

sbingler

Support SM2/SM3 algorithms

3

SM2/SM3 are Chinese cryptographic algorithms: SM3 (hash function) and SM2 (public-private key cryptography), widely used in China, will you support them?

SunFulong

Changes from RFC6265

5

It'd be nice if there were an appendix summarising the changes. We do this for most updates.

mnot

Add changes from RFC 6265 section

3

Closes #2352 Summarizes all the major changes from 6265bis, replacing the existing draft-by-draft change log.

sbingler

I think something is wrong here (why does it expires in a year?) - [2.1.5.2. ](https://httpwg.org/http-extensions/draft-ietf-httpbis-compression-dictionary.html#section-2.1.5.2)[Versioned Directories](https://httpwg.org/http-extensions/draft-ietf-httpbis-compression-dictionary.html#name-versioned-directories) A response that contained a response header: > Use-As-Dictionary: match="/app/*/main.js" Would match main.js...

mnot

Tweak the example in the explanation of "Lax-allowing-unsafe"

1

minimalist attempt at a fix for #2791

b---c

[RFC6265bis WGLC] Lax-allowing-unsafe narrative

7

I don't believe this example given in [8.8.6. ](https://www.ietf.org/archive/id/draft-ietf-httpbis-rfc6265bis-14.html#section-8.8.6)[Top-level requests with "unsafe" methods](https://www.ietf.org/archive/id/draft-ietf-httpbis-rfc6265bis-14.html#name-top-level-requests-with-uns) particularity well reflects the situation that precipitated the behavior described in [5.5.7.2. ](https://www.ietf.org/archive/id/draft-ietf-httpbis-rfc6265bis-14.html#section-5.5.7.2)["Lax-Allowing-Unsafe" enforcement](https://www.ietf.org/archive/id/draft-ietf-httpbis-rfc6265bis-14.html#name-lax-allowing-unsafe-enforce): > For example,...

bc-pi

query: Editorial changes

9

A minor typographical fix and slight rephrasing of limitations of current query-embedded-in-request-URI method.

hawkinsw

query: potential candidate for query format: jsonpath

7

Spec: https://www.rfc-editor.org/rfc/rfc9535.html - how to augment the existing media type definition for QUERY (do we need to? - what response format to use? (application/json)?

reschke