search

WICG / sms-one-time-codes

A way to format SMS messages for use with browser autofill features such as HTML’s autocomplete=one-time-code.
https://wicg.github.io/sms-one-time-codes/
Other
111 stars 12 forks source link

Unable to use on ports other than 443 #3

Closed jgimenez closed 4 years ago

jgimenez commented 4 years ago

The Protocol and port number are hard-coded in the specification. Was this done on purpose?

hober commented 4 years ago

The message syntax hardcodes the scheme of the origin, true. The syntax is as simple as possible, to maximize adoption and minimize interoperability problems.

But § 2.1. Usage allows User Agents to assist the user with filling codes on sites which are same site but not same origin with the code's origin. So if the user gets a message specifying "@example.com #123456", browsers could fill 123456 on https://example.com:8080, because that origin is same-site with https://example.com.

jgimenez commented 4 years ago

Great, thanks!