Alt-Svc: Alternates of alternates

[MikeBishop]

When the origin delegates to an alternate for 30 seconds, and the alternate delegates somewhere else (or to itself) for 7 days, how long does the client keep it? 30 seconds because that’s what the origin said, or 7 days because the alternate is supposed to be equivalent in authority to the origin?

I'm inclined toward the second, since the alternate is supposed to be fully authoritative and since it enables use of an alternate to be persistent so long as you regularly visit the origin. It feels odd to let a delegate grant itself more power than the delegation originally gave it, though....

[martinthomson]

I agree that it's the latter. The alternative service is an alternative with full rights. Those rights are based on the authentication credentials it presents, not the Alt-Svc delegation.

[mnot]

This was discussed some pre-WG and IIRC we came to the same conclusion, but it'd be good to have the discussion play out on list.

[mnot]

Discussed in Prague; second reading is correct. May need to clarify in document.

[mnot]

Do we need someone to suggest text?

[reschke]

yes

[reschke]

See 7f32020