Allow POSTs to same eTLD+1 endpoints.

index.html

@@ -1246,7 +1246,7 @@
   <div class="head">
    <p data-fill-with="logo"><a class="logo" href="http://www.w3.org/"> <img alt="W3C" height="48" src="https://www.w3.org/Icons/w3c_home" width="72"> </a> </p>
    <h1 class="p-name no-ref" id="title">Credential Management Level 1</h1>
-   <h2 class="no-num no-toc no-ref heading settled" id="subtitle"><span class="content">Editor’s Draft, <time class="dt-updated" datetime="2016-02-12">12 February 2016</time></span></h2>
+   <h2 class="no-num no-toc no-ref heading settled" id="subtitle"><span class="content">Editor’s Draft, <time class="dt-updated" datetime="2016-02-18">18 February 2016</time></span></h2>
    <div data-fill-with="spec-metadata">
     <dl>
      <dt>This version:
@@ -2121,7 +2121,9 @@ <h4 class="heading settled" data-level="3.3.3" id="monkey-patching-fetch-3"><spa
        If <var>init</var>’s <code>body</code> member is a <code class="idl"><a data-link-type="idl" href="#credential">Credential</a></code> object: 
       <ol>
        <li data-md="">
-        <p>If <var>r</var>’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-url">url</a> is not the same as <var>r</var>’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client">client</a>’s <code class="idl"><a data-link-type="idl" href="http://www.w3.org/TR/url/#concept-url-origin">origin</a></code>, throw a <code>TypeError</code>.</p>
+        <p>If <var>r</var>’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-url">url</a>’s scheme is not the same as <var>r</var>’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client">client</a>’s <code class="idl"><a data-link-type="idl" href="http://www.w3.org/TR/url/#concept-url-origin">origin</a></code>'s scheme, throw a <code>TypeError</code>.</p>
+       <li data-md="">
+        <p>If <var>r</var>’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-url">url</a>’s host’s <a data-link-type="dfn" href="https://publicsuffix.org/list/#">registerable domain</a> is not the same as <var>r</var>’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client">client</a>’s <code class="idl"><a data-link-type="idl" href="http://www.w3.org/TR/url/#concept-url-origin">origin</a></code>'s host’s <a data-link-type="dfn" href="https://publicsuffix.org/list/#">registerable domain</a>, throw a <code>TypeError</code>.</p>
        <li data-md="">
         <p>Set <var>r</var>’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-redirect-mode">redirect mode</a> to "<code>error</code>".</p>
        <li data-md="">

index.src.html

@@ -1114,14 +1114,20 @@ <h4 id="monkey-patching-fetch-3">`Request()` constructor</h4>
     <li>
       If |init|'s `body` member is a {{Credential}} object:
 
-      1.  If |r|'s <a for="request">url</a> is not the same as |r|'s
-          <a for="request">client</a>'s {{URL/origin}}, throw a `TypeError`.
+      1.  If |r|'s <a for="request">url</a>'s scheme is not the same as |r|'s
+          <a for="request">client</a>'s {{URL/origin}}'s scheme, throw a
+          `TypeError`.
 
-      2.  Set |r|'s <a for="request">redirect mode</a> to "`error`".
+      2.  If |r|'s <a for="request">url</a>'s host's <a>registerable domain</a>
+          is not the same as |r|'s <a for="request">client</a>'s
+          {{URL/origin}}'s host's <a>registerable domain</a>, throw a
+          `TypeError`.
 
-      3.  Set |r|'s <a for="request">skip-service-worker flag</a>.
+      3.  Set |r|'s <a for="request">redirect mode</a> to "`error`".
 
-      4.  Set |r|'s <a for="request">opaque flag</a>.
+      4.  Set |r|'s <a for="request">skip-service-worker flag</a>.
+
+      5.  Set |r|'s <a for="request">opaque flag</a>.
     </li>
   </ol>