Re: "Secure Introduction of Internet-Connected Things" (was Re: [webappsec] Agenda for MONDAY Teleconference 2014-10-20, 12:00 PDT) from Chris Palmer on 2014-10-20 (public-webappsec@w3.org from October 2014)

From: Chris Palmer <palmer@google.com>
Date: Mon, 20 Oct 2014 12:04:20 -0700
To: Adrienne Porter Felt <felt@google.com>
Cc: Brad Hill <hillbrad@gmail.com>, Mike West <mkwst@google.com>, "public-webappsec@w3.org" <public-webappsec@w3.org>
Message-ID: <CAOuvq20pOSjDxipcpb5ZDbK1qu5BsjOknSa5pQnvtX4NRPG0+Q@mail.gmail.com>

On Mon, Oct 20, 2014 at 11:53 AM, Adrienne Porter Felt <felt@google.com> wrote:

> Does it make sense for this to begin as spec work and then get pushed to
> browsers, or should we encourage each browser vendor to start working on the
> problem? Then once there are reasonable ideas out there, we can start
> working on specs and moving forwards an agreed-upon standard.

The latter. Specifications must come after trial-and-error
implementation. Otherwise you get design by committee.

Received on Monday, 20 October 2014 19:04:48 UTC