Mark Nottingham

Results 251 issues of Mark Nottingham

Hi, I'm looking at changes to `http_sfv`, and noticed that this library depends upon it. See [a summary of how it would work](https://github.com/mnot/http_sfv/tree/binary-functional#python-api). Basically, it's moving from an object-based approach...

### What is the issue with the Fetch Standard? [RFC 9421](https://httpwg.org/specs/rfc9421.html) defines the `Signature` header field. One of its use cases is signing requests, effectively acting as a credential. Because...

security/privacy
topic: http
topic: cors
security-tracker

This terminology is... odd, and at least for me makes it more difficult than necessary to read the spec. Have you considered alternatives? E.g., * Query cache key * Varied...

editorial
no-vary-search

The introduction should explicitly point out that this mechanism is only for URLs that use application/x-www-form-urlencoded query strings; other formats aren't supported.

editorial
no-vary-search

subreq.py

enhancement

Right now, it appears that using tinycss2 requires feeding the entire CSS file into the parser. A streaming API (similar to html.parser) would allow applications to avoid buffering and the...

1. Cache some partial content 2. Request partially overlapping content 3. Fail request 2 (eg 403) Examine response 2: 1. Does cache serve failure response or partial response (i.e., does...

* `data.js:99`: searchRfcs const padded = `RFC${searchWord.padStart(4, '0')}` * `data.js:147`: rfcNumToName return `RFC${rfcNum.padStart(4, '0')}` * `data.js:152`: rfcNameToNum const rfcNumPad = rfcNum.toString().padStart(4, '0')

https://datatracker.ietf.org/group/iesg/statements/

### Description In the 'Manage unassigned open review requests' UI, there are often _many_ requests to deal with. The current UI has a dropdown with the options 'Team will not...

enhancement
under_review