top | item 40991293

(no title)

josh3736 | 1 year ago

You already can stream bodies as they're generated with chunked encoding; trailers aren't really needed for that.

Cookies might be useful, but I guess you could do

    <script>document.cookie = '…'</script>
right before the closing `</body>` if you really needed to set cookies late in the game.

I'd love to see something to send content hashes (that browsers would actually verify), replacing the obsolete `Content-MD5`. Maybe `Integrity`, matching the `integrity` HTML attribute used in SRI? It could be a header (for static content) or trailer (for dynamic content).

discuss

order

donatj|1 year ago

Eh, a cookie set with JavaScript can't be HttpOnly. It also requires JavaScript. None of this is ideal.