2 ms·
> User privacy is enhanced as the issuer does not learn which web application is making the request as the request is mediated by the browser. How can you avoi
by littlestymaar 1y ago
> User privacy is enhanced as the issuer does not learn which web application is making the request as the request is mediated by the browser.
How can you avoid revealing the application through the `Origin` header?
- gruez 1y agoThe request is sent by the browser, not the webapp itself (ie. using xhr or fetch) so it doesn't have headers like "Origin" added.
- littlestymaar 1y agoHa! Thank you, I misunderstood who was behind this proposal but since it's W3C it's something that would directly be implemented by the browser itself.