On 28 October 2014 12:13, Dave Crocker <dhc(_at_)dcrocker(_dot_)net> wrote:
On 10/27/2014 6:25 PM, Brian E Carpenter wrote:
Yes, of course, but now they could automatically persuade a
browser itself that they conform to the IETF RFC7xxx standard
for safe browsing. Maybe the browser could display a little
"figleaf" icon just like the little "padlock" icon.
"persuade a browser itself" has nothing to do with the current proposal,
since the current proposal stops with making a request to the server.
So there is no model for communicating back to the browser that content
is safe or not, nevermind for communicating up to the user.
Actually, there's Preference-Applied. I don't recall seeing that forbidden
by this draft, and it's a "MAY send" in RFC 7240. That said, it would still
be a bit silly for a browser to add UI to advertise the presence of the
header.
--
Matthew Kerwin
http://matthew.kerwin.net.au/