http-extensions
http-extensions copied to clipboard
HTTP Extensions in progress
> 2.3. Conditional Requests > > A conditional QUERY requests that the selected representation (i.e., > the query results, after any content negotiation) be returned in the > response only...
> A.4. Content-Location, Location, and Indirect Responses > > As described in Section 2.1, the Content-Location and Location > response fields in success responses (2xx, Section 15.3 of [HTTP]) >...
As discussed at [IETF 122](https://httpwg.org/wg-materials/ietf122/minutes.html#delete-cookie-and-_httponly-prefix), this is a stab at integrating https://yoavweiss.github.io/httponly_prefix/draft-httponlyprefix-weiss-http.html with the Cookie layering processing model. --- - [x] Cookie Store API PR: https://github.com/WICG/cookie-store/pull/262 - [x] WPT coverage:...
https://bugzilla.mozilla.org/show_bug.cgi?id=1909980#c5 > Chrome computes the expiration time by adding the delta between the local and server times. If your computer is 10 hours in the future, the cookie expiration time...
As noticed in https://github.com/httpwg/http-extensions/pull/3110#discussion_r2159223329 we normalize the Path attribute a bit too much as cookie prefixes care about the distinction between the attribute being present and absent. This probably also...
Following up on a [discussion](https://lists.w3.org/Archives/Public/ietf-http-wg/2025AprJun/0192.html) from the mailing list. As we're [planning to add](https://github.com/httpwg/http-extensions/pull/3110) more prefixes, it'd be good to have a way to combine them. After multiple proposals, I...
(follow up to https://github.com/httpwg/http-extensions/issues/2896) Currently: >[2.4. ](https://www.ietf.org/archive/id/draft-ietf-httpbis-safe-method-w-body-11.html#section-2.4)[Caching](https://www.ietf.org/archive/id/draft-ietf-httpbis-safe-method-w-body-11.html#name-caching) > >The response to a QUERY method is cacheable; a cache MAY use it to satisfy subsequent QUERY requests as per [Section 4](https://rfc-editor.org/rfc/rfc9111#section-4)...
- `Max-Age` - `HttpOnly` - `SameSite` 🤔
This terminology is... odd, and at least for me makes it more difficult than necessary to read the spec. Have you considered alternatives? E.g., * Query cache key * Varied...