DescriptionDo not require Expect-CT report-uris to be quoted
Requiring quoted URLs was cargo-culted from the HPKP implementation. The HPKP
spec does not actually say that report-uris must be quoted -- it's simply that
all the examples quote them. So it's possibly a bug that Chrome's HPKP implementation
requires quoted report-uris. The Expect-CT spec doesn't say anything about quoting
report-uris nor do I see a reason that it should, so Chrome's implementation shouldn't
require them.
BUG=679012
Review-Url: https://codereview.chromium.org/2895373002
Cr-Commit-Position: refs/heads/master@{#473959}
Committed: https://chromium.googlesource.com/chromium/src/+/8ed543597520a61e2b12d8ed6fef02e97171a5d6
Patch Set 1 #
Messages
Total messages: 13 (9 generated)
|