Re: [integrity]: Origin confusion attacks.

We've had about 24 hours of discussion.

Yes, with some of the very smartest minds on the topic contributing, but
maybe it's still too soon to just give up?  :)

How about we start by marking it as "at risk" in the FPWD?




On Thu, Jan 9, 2014 at 3:25 PM, Devdatta Akhawe <dev.akhawe@gmail.com>wrote:

> > I don't have a good mitigation idea off the top of my head, but I agree
> it's
> > something we should worry about.
>
> I view the integrity-based cache more of a "good-to-have" feature
> rather than important to the main use case of the spec. Maybe just
> removing this should also be on the table as a possibility? (in case
> we can't come up with a clean solution)
>
> --dev
>
>