You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
That should be example.net I believe. Also example.net is the actual origin once UA is navigated to the exchange. The loading sketch in the explainer discusses some of these (while not clearly specifying details like referrers)
There's no plan to add a new Referer-like header that identifies the physical URL of the referrer. It's always possible, of course, given a strong enough use case.
1, navigate to https://example.com/a.sxg
2, a.sxg is signed by https://example.net so browser display it as https://example.net
3, clicking the link on https://example.net
in request of 3, which origin should on referrer header example.com (actual) or example.net (display) ?
(spec seems not mention this: https://wicg.github.io/webpackage/draft-yasskin-http-origin-signed-responses.html)
The text was updated successfully, but these errors were encountered: