From f8eba9bf580b201027cf5f5acc92d157d10fd47c Mon Sep 17 00:00:00 2001
From: Noam Rosenthal <noam.j.rosenthal@gmail.com>
Date: Mon, 14 Mar 2022 15:03:31 +0200
Subject: [PATCH] Limit server-timing to https

---
 fetch.bs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/fetch.bs b/fetch.bs
index ed135b6ce..345f85951 100644
--- a/fetch.bs
+++ b/fetch.bs
@@ -4299,7 +4299,8 @@ steps:
    <a for="fetch params">timing info</a>.</p></li>
   </ol>
  </li>
- <li><p>Otherwise, set <var>response</var>'s <a for=response>timing info</a>'s
+ <li><p>Otherwise, if <var>response</var>'s <a for=response>URL</a>'s <a for=url>scheme</a> is
+ "<code>https</code>", then set <var>response</var>'s <a for=response>timing info</a>'s
  <a for="fetch timing info">server timing headers</a> to the result of
  <a for="header list">getting, decoding, and splitting</a> `<code>Server-Timing</code>` from
  <var>response</var>'s <a for=response>header list</a>.</p></li>