On 10/27/2014 6:25 PM, Brian E Carpenter wrote:
> Yes, of course, but now they could automatically persuade a
> browser itself that they conform to the IETF RFC7xxx standard
> for safe browsing. Maybe the browser could display a little
> "figleaf" icon just like the little "padlock" icon.
"persuade a browser itself" has nothing to do with the current proposal,
since the current proposal stops with making a request to the server.
So there is no model for communicating back to the browser that content
is safe or not, nevermind for communicating up to the user.
Actually, there's Preference-Applied. I don't recall seeing that forbidden by this draft, and it's a "MAY send" in RFC 7240. That said, it would still be a bit silly for a browser to add UI to advertise the presence of the header.
Matthew Kerwin
http://matthew.kerwin.net.au/
http://matthew.kerwin.net.au/