public-webappsec@w3.org from July 2015 by author

Adrian Hope-Bailie

• Re: Coming back to CREDENTIAL. (Friday, 31 July)
• Re: Coming back to CREDENTIAL. (Friday, 31 July)
• [credential-management] Identity at Mozilla (Thursday, 30 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Wednesday, 8 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Wednesday, 1 July)

Ahmed Saleh

• Suggestion for code exposure security (Tuesday, 28 July)
• Application Hash exchange between client and server (Tuesday, 28 July)

Alex Russell

• Re: CLEAR: Moved to WebAppSec repository. (Thursday, 16 July)
• Re: CLEAR: Moved to WebAppSec repository. (Wednesday, 15 July)
• Re: CLEAR: Moved to WebAppSec repository. (Wednesday, 15 July)

Anders Rundgren

• Re: Definition of secure origin in MIX and POWER (Wednesday, 8 July)

Anne van Kesteren

• Re: CfC: Republish MIX as CR; deadline July 29th. (Thursday, 30 July)
• Re: CfC: Republish MIX as CR; deadline July 29th. (Thursday, 30 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Thursday, 30 July)
• Re: CfC: Republish MIX as CR; deadline July 29th. (Thursday, 30 July)
• Re: CfC: Republish MIX as CR; deadline July 29th. (Thursday, 30 July)
• Re: CfC: Republish MIX as CR; deadline July 29th. (Thursday, 30 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Thursday, 30 July)
• Re: CfC: Republish MIX as CR; deadline July 29th. (Tuesday, 28 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Tuesday, 28 July)
• Re: CfC: Republish MIX as CR; deadline July 29th. (Tuesday, 28 July)
• Re: SRI fail open behaviour (Tuesday, 28 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 20 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 20 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 20 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 20 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 20 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 20 July)
• Re: CSP: Blob URLs in new windows. (Monday, 20 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Sunday, 19 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Friday, 17 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Friday, 17 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Tuesday, 7 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Tuesday, 7 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Tuesday, 7 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Tuesday, 7 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 6 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 6 July)
• Re: CSP2: Drop 'unsafe-redirect'. (Thursday, 2 July)
• Re: CSP2: Drop 'unsafe-redirect'. (Thursday, 2 July)
• Re: CSP2: Drop 'unsafe-redirect'. (Thursday, 2 July)
• Re: [powerful-features] Use of the active document in defining a secure context is fishy (Thursday, 2 July)
• Re: CSP2: Drop 'unsafe-redirect'. (Wednesday, 1 July)
• Re: CSP2: Drop 'unsafe-redirect'. (Wednesday, 1 July)

Arthur Barstow

• Re: Post-Zakim calls? (Re: [webappsec] Teleconference Agenda 29-Jun) (Wednesday, 1 July)

Ben Gidley

• Re: [mixed-content] DASH Players and Mixed Content (Wednesday, 22 July)
• [mixed-content] DASH Players and Mixed Content (Monday, 20 July)

Boris Zbarsky

• Re: [powerful-features] Use of the active document in defining a secure context is fishy (Thursday, 2 July)
• [powerful-features] Use of the active document in defining a secure context is fishy (Wednesday, 1 July)
• [powerful-features] Talking about the "incumbent settings object" of a document makes no sense (Wednesday, 1 July)
• [powerful-features] The note about responsible documents and workers makes no sense (Wednesday, 1 July)

Brad Hill

• Re: Application Hash exchange between client and server (Thursday, 30 July)
• [webappsec] New stylesheets for TRs (Tuesday, 28 July)
• WebAppSec Teleconference Agenda (Monday, 27 July)
• Re: CfC: Republish MIX as CR; deadline July 29th. (Wednesday, 22 July)
• Re: [mixed-content] DASH Players and Mixed Content (Tuesday, 21 July)
• Re: CSP: Blob URLs in new windows. (Monday, 20 July)
• Re: CfC: Clear Site Data to FPWD; deadline July 24th. (Friday, 17 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Friday, 17 July)
• Guests at Berlin F2F (Wednesday, 8 July)
• Re: Draft agenda for Berlin F2F (Tuesday, 7 July)
• [webappsec] Monday's call CANCELLED (Tuesday, 7 July)
• Draft agenda for Berlin F2F (Tuesday, 7 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Tuesday, 7 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 6 July)
• Re: Post-Zakim calls? (Re: [webappsec] Teleconference Agenda 29-Jun) (Wednesday, 1 July)

Brian Smith

• Re: SRI fail open behaviour (Tuesday, 28 July)
• Re: CfC: Republish MIX as CR; deadline July 29th. (Tuesday, 28 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Tuesday, 28 July)
• Re: CfC: Republish MIX as CR; deadline July 29th. (Tuesday, 28 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Sunday, 19 July)
• Re: SRI fail open behaviour (Saturday, 18 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Wednesday, 8 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Wednesday, 8 July)
• Re: Definition of secure origin in MIX and POWER (Wednesday, 8 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Tuesday, 7 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Tuesday, 7 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Tuesday, 7 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Tuesday, 7 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Tuesday, 7 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Tuesday, 7 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 6 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 6 July)
• Re: CSP2: Drop 'unsafe-redirect'. (Thursday, 2 July)
• Re: CSP2: Drop 'unsafe-redirect'. (Wednesday, 1 July)

Caleb Queern

• [clear-site-data] implications on autofill / autocomplete behavior by browsers (Monday, 20 July)

chaals@yandex-team.ru

• Re: Programmatically declaring the CSP of an iframe (Monday, 20 July)

Conrad Irwin

• Re: Application Hash exchange between client and server (Thursday, 30 July)
• Re: Programmatically declaring the CSP of an iframe (Tuesday, 21 July)
• Programmatically declaring the CSP of an iframe (Monday, 20 July)
• Re: CSP: Blob URLs in new windows. (Monday, 20 July)

Coralie Mercier

• Call for Exclusions (Update): The Permissions API (Thursday, 9 July)

Daniel Weinberger

• Re: [mixed-content] DASH Players and Mixed Content (Thursday, 23 July)

Devdatta Akhawe

• Re: Definition of secure origin in MIX and POWER (Wednesday, 8 July)

Eduardo' Vela\

• Re: CSP: Blob URLs in new windows. (Monday, 20 July)
• Re: CSP: Blob URLs in new windows. (Monday, 20 July)

Eero Häkkinen

• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Wednesday, 1 July)

Francois Marier

• Re: SRI fail open behaviour (Monday, 27 July)
• Re: SRI fail open behaviour (Sunday, 19 July)
• Re: SRI fail open behaviour (Sunday, 19 July)
• Re: SRI fail open behaviour (Saturday, 18 July)
• Definition of secure origin in MIX and POWER (Wednesday, 8 July)

Frederik Braun

• Directions to Mozilla Berlin (Re: Draft agenda for Berlin F2F) (Monday, 13 July)
• Re: Post-Zakim calls? (Re: [webappsec] Teleconference Agenda 29-Jun) (Wednesday, 1 July)

Ilya Grigorik

• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Tuesday, 7 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Tuesday, 7 July)

Jeffrey Walton

• Re: Definition of secure origin in MIX and POWER (Thursday, 9 July)
• Re: Definition of secure origin in MIX and POWER (Wednesday, 8 July)
• Re: [powerful-features] The note about responsible documents and workers makes no sense (Wednesday, 1 July)

Joel Weinberger

• Re: Application Hash exchange between client and server (Thursday, 30 July)
• Re: Application Hash exchange between client and server (Wednesday, 29 July)
• Re: SRI fail open behaviour (Monday, 27 July)

Jonathan Kingston

• Re: SRI fail open behaviour (Monday, 27 July)
• SRI fail open behaviour (Saturday, 18 July)
• Re: CLEAR: Moved to WebAppSec repository. (Wednesday, 15 July)
• Ambitious charter timeline (Friday, 10 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Thursday, 9 July)

Kristijan Burnik

• Re: Suggestion for code exposure security (Thursday, 30 July)

Martin Thomson

• Re: [webappsec] New stylesheets for TRs (Wednesday, 29 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Thursday, 9 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Wednesday, 8 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Tuesday, 7 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Wednesday, 1 July)

Mike West

• Re: Coming back to CREDENTIAL. (Friday, 31 July)
• Coming back to CREDENTIAL. (Friday, 31 July)
• Re: CfC: Republish MIX as CR; deadline July 29th. (Thursday, 30 July)
• Re: CfC: Republish MIX as CR; deadline July 29th. (Thursday, 30 July)
• Re: CfC: Republish MIX as CR; deadline July 29th. (Thursday, 30 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Thursday, 30 July)
• Re: CfC: Republish MIX as CR; deadline July 29th. (Thursday, 30 July)
• Re: CfC: Republish MIX as CR; deadline July 29th. (Thursday, 30 July)
• Re: CfC: Republish MIX as CR; deadline July 29th. (Thursday, 30 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Thursday, 30 July)
• CfC: Republish MIX as CR; deadline July 29th. (Wednesday, 22 July)
• Re: [mixed-content] DASH Players and Mixed Content (Tuesday, 21 July)
• Re: [clear-site-data] implications on autofill / autocomplete behavior by browsers (Tuesday, 21 July)
• Re: Programmatically declaring the CSP of an iframe (Tuesday, 21 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 20 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 20 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 20 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 20 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 20 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 20 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 20 July)
• Re: CSP: Blob URLs in new windows. (Monday, 20 July)
• CSP: Blob URLs in new windows. (Monday, 20 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Saturday, 18 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Friday, 17 July)
• CfC: Clear Site Data to FPWD; deadline July 24th. (Friday, 17 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Friday, 17 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Thursday, 16 July)
• Re: CLEAR: Moved to WebAppSec repository. (Wednesday, 15 July)
• Re: CLEAR: Moved to WebAppSec repository. (Wednesday, 15 July)
• CLEAR: Moved to WebAppSec repository. (Wednesday, 15 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Thursday, 9 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Thursday, 9 July)
• Re: Definition of secure origin in MIX and POWER (Thursday, 9 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Wednesday, 8 July)
• Re: Definition of secure origin in MIX and POWER (Wednesday, 8 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Wednesday, 8 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Wednesday, 8 July)
• Re: Definition of secure origin in MIX and POWER (Wednesday, 8 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Tuesday, 7 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Tuesday, 7 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 6 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 6 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 6 July)
• Re: CSP2: Drop 'unsafe-redirect'. (Monday, 6 July)
• Re: CSP2: Drop 'unsafe-redirect'. (Thursday, 2 July)
• Re: CSP2: Drop 'unsafe-redirect'. (Thursday, 2 July)
• Re: CSP2: Drop 'unsafe-redirect'. (Thursday, 2 July)
• Re: [powerful-features] Use of the active document in defining a secure context is fishy (Thursday, 2 July)
• Re: [powerful-features] Talking about the "incumbent settings object" of a document makes no sense (Thursday, 2 July)
• Re: [powerful-features] Use of the active document in defining a secure context is fishy (Thursday, 2 July)
• Re: CSP2: Drop 'unsafe-redirect'. (Wednesday, 1 July)
• Re: CSP2: Drop 'unsafe-redirect'. (Wednesday, 1 July)
• CSP2: Drop 'unsafe-redirect'. (Wednesday, 1 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Wednesday, 1 July)
• Re: [webappsec] CfC: Proposed non-normative updates to CORS (Wednesday, 1 July)

Oda, Terri

• Permissions management, IoT/embedded devices and the permissions API (Friday, 31 July)

Richard Barnes

• Re: [credential-management] Identity at Mozilla (Thursday, 30 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Thursday, 16 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Thursday, 9 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Wednesday, 8 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Wednesday, 8 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Wednesday, 8 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Tuesday, 7 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Tuesday, 7 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Tuesday, 7 July)
• Re: Post-Zakim calls? (Re: [webappsec] Teleconference Agenda 29-Jun) (Wednesday, 1 July)

Ryan Sleevi

• Re: CfC: Mixed Content to PR; deadline July 6th. (Tuesday, 7 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 6 July)

Sandeep Kamble

• Garage4Hackers Mobile Application CTF is up (Sunday, 5 July)

Tanvi Vyas

• Re: SRI fail open behaviour (Monday, 27 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Wednesday, 8 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 6 July)
• Re: CfC: Mixed Content to PR; deadline July 6th. (Monday, 6 July)

timeless

• [EPR] initial feedback (Wednesday, 1 July)

Wendy Seltzer

• Re: [webappsec] New stylesheets for TRs (Wednesday, 29 July)
• Testing W3C's HTTPS setup (Friday, 10 July)
• Re: CSP2: Drop 'unsafe-redirect'. (Wednesday, 1 July)
• Re: CSP2: Drop 'unsafe-redirect'. (Wednesday, 1 July)

Xueyuan Jia

• Call for Exclusions (Update): Credential Management Level 1 (Thursday, 30 July)
• Call for Exclusions: Content Security Policy Level 2 (Wednesday, 22 July)

Yoav Weiss

• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Tuesday, 7 July)
• Re: UPGRADE: 'HTTPS' header causing compatibility issues. (Wednesday, 1 July)

Last message date: Friday, 31 July 2015 20:23:11 UTC