W3C home > Mailing lists > Public > public-tracking@w3.org > September 2012

Re: ISSUE-164 (requirements on same-party attribute): Call for text alternatives (possibly until Wednesday September 26)

From: Ed Felten <ed@felten.com>
Date: Sun, 23 Sep 2012 07:54:14 -0400
Message-ID: <CANZBoGgr-0Xi7adjxhDwtuGXav4BEtg1PqO+EMAv_g5YZZXdOQ@mail.gmail.com>
To: Matthias Schunter <mts-std@schunter.org>
Cc: "public-tracking@w3.org" <public-tracking@w3.org>
Are these proposals mutually exclusive, or might it be possible (say) to
adopt C along with either A or B?

On Sat, Sep 22, 2012 at 2:13 PM, Matthias Schunter <mts-std@schunter.org>wrote:

> Hi Team,
>
> triggered by last weeks call, I created ISSUE-146 that allows us to
> discuss to what extent the "same-party" attribute should be optional.
>
> During the call, we discussed three options so far:
>
> (A) Current draft: Resource is optional
>
> (B) Alternative proposal 1: If multiple domains on a page belong to the
> same party, then this fact SHOULD be declared using the same-party
> attribute
>
> (C) Alternative proposal 2: State that user agents MAY assume that
> additional elements that are hosted under a different URL and occur on a
> page and declare "intended for 1st party use" are malicious unless this
> URL is listed in the "same-party"  attribute
>
> In order to now start our decision procedure, I need proposed text
> changes (as specific as possible) for proposed alternatives to the
> current text (text proposals may follow our discussions along the lines
> of (B) or (C) or propose further alternatives).
>
> I would like to obtain input by Wednesday (if possible) to then start
> the call for objections ASAP.
>
> Regards,
> matthias
>
>
>
>
Received on Sunday, 23 September 2012 11:54:56 UTC

This archive was generated by hypermail 2.3.1 : Friday, 21 June 2013 10:11:34 UTC