Re: [Bug 25809] Security issue: Abuse of "call me" URLs

On 07/03/2014 07:26 AM, bugzilla@jessica.w3.org wrote:
> https://www.w3.org/Bugs/Public/show_bug.cgi?id=25809
>
> Adam Bergkvist <adam.bergkvist@ericsson.com> changed:
>
>             What    |Removed                     |Added
> ----------------------------------------------------------------------------
>                   CC|                            |adam.bergkvist@ericsson.com
>
> --- Comment #3 from Adam Bergkvist <adam.bergkvist@ericsson.com> ---
> The receivers of this info would be web developers, rather than implementers of
> the spec. Where do we put that kind of info
>
I think the web developers mostly will read books and pages written by 
people who (hopefully) read the spec - and those people will hopefully 
read it from end to end, so it doesn't matter much where.

I think putting it in the (non-normative) security considerations 
section will do nicely.

Received on Thursday, 3 July 2014 08:57:24 UTC