Re: CSP: Drop IP-matching? (was Re: [CSP] URI/IRI normalization and comparison) from Martin Thomson on 2015-02-04 (public-webappsec@w3.org from February 2015)

From: Martin Thomson <martin.thomson@gmail.com>
Date: Thu, 5 Feb 2015 10:15:27 +1100
To: Mike West <mkwst@google.com>
Cc: "Oda, Terri" <terri.oda@intel.com>, Anne van Kesteren <annevk@annevk.nl>, "public-webappsec@w3.org" <public-webappsec@w3.org>
Message-ID: <CABkgnnUmDHw6Ne0HQoEz-oyetnfFav2+Z4FaO-5+isQ1rMW9iw@mail.gmail.com>

On 4 February 2015 at 21:24, Mike West <mkwst@google.com> wrote:
> My justification for allowing IPv4 is not IoT in itself, but the fact that
> IPv4 is being used today, by the
> internet-of-things-that-happen-to-be-webservers-in-datacenters.

Can you explain how those iotthtbwid devices might benefit from CSP?
I don't want to be obtuse, but I'm not seeing a case there.

Received on Wednesday, 4 February 2015 23:15:54 UTC