Hi, Vidar Ramdal schrieb: >>>> * absolute uri: starts with scheme:// >>> Is the value of scheme important, or is it just to signal that this is >>> an absolute uri? >>> If the value is to be used in the resolution, then we should take into >>> account that requests can be both http:// and https:// > > On Sun, Nov 23, 2008 at 7:30 PM, Felix Meschberger <[EMAIL PROTECTED]> wrote: >> Basically, I would say, the scheme is important, too: For example you >> might want to force https on certain content locations. > > Hmmm. I'm not sure I agree. I think a resource should be the same > regardless of what protocol you choose to deliver it. I can see cases > where I want to force https, but that would be depending on the use > case (e.g. passing a login), not depending on the resource itself. > > So I think I want to avoid having to map both http and https > explicitly. If I want to force https on something, I'll do it with > scripts.
I agree. My thinking of taking of whether the scheme is http or https into account is, that you might want to force a client into using https no matter what. Anyway, going the route Roy Fielding proposes (and which you also proposed earlier) we have the mechanism of forcing the user into https be sending back a redirect response. Regards Felix
