4 ms·
Probably because HTTP is important! What would you change in 1.2?
by toomim 7y ago
Probably because HTTP is important! What would you change in 1.2?
- m_eiman 7y agoI would replace cookies with a browser controlled session id, 128 random bits encoded as hex.
- yeaaaaah 7y agoSomething like HTTP state tokens? https://mikewest.github.io/http-state-tokens/draft-west-http-state-tokens.html https://mikewest.github.io/http-state-tokens/draft-west-http...
- m_eiman 7y agoYes, something like that! Except also remove support for old-style cookies, which from a quick scan that spec doesn't do.
- gambler 7y agoIdeally, everything related to sessions and domains. The security model we operate under on the web is completely outdated, which adds a ton of complexity to everything else. Secondly, I would look into cutting out all the parts of the HTTP protocol normal websites aren't commonly using to reduce the complexity of the implementations. A lot of things HTTP does are probably better off being move to other protocols altogether.