Hacker News new | ask | show | jobs
by josh3736 697 days ago
You already can stream bodies as they're generated with chunked encoding; trailers aren't really needed for that.

Cookies might be useful, but I guess you could do

    <script>document.cookie = '…'</script>
right before the closing `</body>` if you really needed to set cookies late in the game.

I'd love to see something to send content hashes (that browsers would actually verify), replacing the obsolete `Content-MD5`. Maybe `Integrity`, matching the `integrity` HTML attribute used in SRI? It could be a header (for static content) or trailer (for dynamic content).

1 comments

Eh, a cookie set with JavaScript can't be HttpOnly. It also requires JavaScript. None of this is ideal.