{"action":"created","issue":{"url":"https://api.github.com/repos/w3c/web-nfc/issues/33","labels_url":"https://api.github.com/repos/w3c/web-nfc/issues/33/labels{/name}","comments_url":"https://api.github.com/repos/w3c/web-nfc/issues/33/comments","events_url":"https://api.github.com/repos/w3c/web-nfc/issues/33/events","html_url":"https://github.com/w3c/web-nfc/issues/33","id":101468656,"number":33,"title":"Define \"sub-domain match\"","user":{"login":"jyasskin","id":83420,"avatar_url":"https://avatars.githubusercontent.com/u/83420?v=3","gravatar_id":"","url":"https://api.github.com/users/jyasskin","html_url":"https://github.com/jyasskin","followers_url":"https://api.github.com/users/jyasskin/followers","following_url":"https://api.github.com/users/jyasskin/following{/other_user}","gists_url":"https://api.github.com/users/jyasskin/gists{/gist_id}","starred_url":"https://api.github.com/users/jyasskin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jyasskin/subscriptions","organizations_url":"https://api.github.com/users/jyasskin/orgs","repos_url":"https://api.github.com/users/jyasskin/repos","events_url":"https://api.github.com/users/jyasskin/events{/privacy}","received_events_url":"https://api.github.com/users/jyasskin/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-08-17T17:22:47Z","updated_at":"2015-08-18T10:24:18Z","closed_at":null,"body":"Ideally just by reference to an existing algorithm in another web standard.\r\n\r\nAlternatively, consider just requiring that the [origins](https://html.spec.whatwg.org/multipage/browsers.html#origin) be equal. The web is moving away from use of sub-domains for security."},"comment":{"url":"https://api.github.com/repos/w3c/web-nfc/issues/comments/132158405","html_url":"https://github.com/w3c/web-nfc/issues/33#issuecomment-132158405","issue_url":"https://api.github.com/repos/w3c/web-nfc/issues/33","id":132158405,"user":{"login":"annevk","id":1544111,"avatar_url":"https://avatars.githubusercontent.com/u/1544111?v=3","gravatar_id":"","url":"https://api.github.com/users/annevk","html_url":"https://github.com/annevk","followers_url":"https://api.github.com/users/annevk/followers","following_url":"https://api.github.com/users/annevk/following{/other_user}","gists_url":"https://api.github.com/users/annevk/gists{/gist_id}","starred_url":"https://api.github.com/users/annevk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/annevk/subscriptions","organizations_url":"https://api.github.com/users/annevk/orgs","repos_url":"https://api.github.com/users/annevk/repos","events_url":"https://api.github.com/users/annevk/events{/privacy}","received_events_url":"https://api.github.com/users/annevk/received_events","type":"User","site_admin":false},"created_at":"2015-08-18T10:24:18Z","updated_at":"2015-08-18T10:24:18Z","body":"I think you need to read up on \"subdomain\", \"origin\", and \"path\". (Also, a browsing context doesn't have an origin, its active document does.)"}}