Conformance critieria for headers with multiple field values

[kjetilk]

When writing a test for OPTIONS, it is not clear what the conformance criteria would be. In particular, how the multiple field values should be treated, would an implementation be conformant if it had a subset of the indicated values? Exactly the same? Superset?

[RubenVerborgh]

That and CORS, I would say.

[kjetilk]

Indeed. There's a bunch of them. And it is an open world in that RFC7230 does not define the syntax of field values, but I think a comma separated list will work for now.

[csarven]

https://tools.ietf.org/html/rfc8941