RFC 6454: The Web Origin Concept

This document defines the concept of an "origin", which is often used as the scope of authority or privilege by user agents. Typically, user agents isolate…

Read RFC 6454 on the RFC Editor

Outgoing relationships (15 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5234: Augmented BNF for Syntax Specifications: ABNF
Normative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Normative reference — RFC 2616: Hypertext Transfer Protocol -- HTTP/1.1
Normative reference — RFC 5890: Internationalized Domain Names for Applications (IDNA): Definitions and Document Framework
Normative reference — RFC 20: ASCII format for network interchange
Normative reference — RFC 5891: Internationalized Domain Names in Applications (IDNA): Protocol
Normative reference — RFC 3864: Registration Procedures for Message Header Fields
Normative reference — RFC 4790: Internet Application Protocol Collation Registry
Informative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Informative reference — RFC 3490: Internationalizing Domain Names in Applications (IDNA)
Informative reference — RFC 6265: HTTP State Management Mechanism
Informative reference — RFC 6455: The WebSocket Protocol
Informative reference — RFC 2817: Upgrading to TLS Within HTTP/1.1
Informative reference — RFC 2397: The "data" URL scheme

Incoming relationships (22 related RFCs)

Normatively referenced by — RFC 7030: Enrollment over Secure Transport
Normatively referenced by — RFC 7616: HTTP Digest Access Authentication
Normatively referenced by — RFC 7838: HTTP Alternative Services
Normatively referenced by — RFC 8827: WebRTC Security Architecture
Normatively referenced by — RFC 7486: HTTP Origin-Bound Authentication (HOBA)
Normatively referenced by — RFC 9205: Building Protocols with HTTP
Normatively referenced by — RFC 8089: The "file" URI Scheme
Normatively referenced by — RFC 8164: Opportunistic Security for HTTP/2
Normatively referenced by — RFC 8292: Voluntary Application Server Identification (VAPID) for Web Push
Normatively referenced by — RFC 9674: Same-Origin Policy for the RPKI Repository Delta Protocol (RRDP)
Informatively referenced by — RFC 6555: Happy Eyeballs: Success with Dual-Stack Hosts
Informatively referenced by — RFC 6690: Constrained RESTful Environments (CoRE) Link Format
Informatively referenced by — RFC 9460: Service Binding and Parameter Specification via the DNS (SVCB and HTTPS Resource Records)
Informatively referenced by — RFC 6797: HTTP Strict Transport Security (HSTS)
Informatively referenced by — RFC 6920: Naming Things with Hashes
Informatively referenced by — RFC 7541: HPACK: Header Compression for HTTP/2
Informatively referenced by — RFC 8075: Guidelines for Mapping Implementations: HTTP to the Constrained Application Protocol (CoAP)
Informatively referenced by — RFC 6787: Media Resource Control Protocol Version 2 (MRCPv2)
Informatively referenced by — RFC 7977: The WebSocket Protocol as a Transport for the Message Session Relay Protocol (MSRP)
Informatively referenced by — RFC 8752: Report from the IAB Workshop on Exploring Synergy between Content Aggregation and the Publisher Ecosystem (ESCAPE)
Informatively referenced by — RFC 9412: The ORIGIN Extension in HTTP/3
Informatively referenced by — RFC 9844: Entering IPv6 Zone Identifiers in User Interfaces