public-webappsec@w3.org from September 2015 by author

Adrian Hope-Bailie

• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 23 September)
• Re: Coming back to CREDENTIAL. (Tuesday, 1 September)

Alex Russell

• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Friday, 25 September)
• Re: Testing W3C's HTTPS setup (Tuesday, 22 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Friday, 18 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 15 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 15 September)

Anders Rundgren

• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Saturday, 26 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Thursday, 24 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 23 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 23 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 1 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 1 September)

ANDREAE Philip

• RE: A Somewhat Critical View of SOP (Same Origin Policy) (Friday, 25 September)

André N. Klingsheim

• RE: [CSP2] connect-src 'self' and websockets (Monday, 28 September)
• [CSP2] connect-src 'self' and websockets (Sunday, 27 September)

Anne van Kesteren

• Re: Referrer value for resources fetched from CSS (Wednesday, 30 September)
• Re: Referrer value for resources fetched from CSS (Wednesday, 30 September)
• Re: SRI: data URIs and Blob URL (Thursday, 24 September)
• Re: SRI: data URIs and Blob URL (Wednesday, 23 September)
• Re: Testing W3C's HTTPS setup (Monday, 21 September)
• Re: [mixed-content] DASH Players and Mixed Content (Friday, 18 September)
• Re: [mixed-content] DASH Players and Mixed Content (Friday, 18 September)
• Re: [mixed-content] DASH Players and Mixed Content (Friday, 18 September)
• Re: SRI: edge case when loading the same stylesheet twice in a document (Thursday, 17 September)
• Re: SRI: edge case when loading the same stylesheet twice in a document (Thursday, 17 September)
• Re: Secure Contexts: It's worth taking another look. (Friday, 11 September)
• Re: CSP 401 Issue (Wednesday, 9 September)
• Re: CSP 401 Issue (Wednesday, 9 September)
• Re: CSP 401 Issue (Sunday, 6 September)
• Re: CSP 401 Issue (Saturday, 5 September)

Arthur Barstow

• Re: RfC: Service Workers (Monday, 21 September)
• RfC: Service Workers (Monday, 21 September)

Boris Zbarsky

• Re: Referrer value for resources fetched from CSS (Wednesday, 30 September)
• Re: Referrer value for resources fetched from CSS (Wednesday, 30 September)
• Re: Referrer value for resources fetched from CSS (Wednesday, 30 September)
• Re: Referrer value for resources fetched from CSS (Wednesday, 30 September)

Brad Hill

• Re: [CSP2]Is there a directive dealing with the window.opener.location phishing concern? (Wednesday, 30 September)
• Re: SOP wiki was: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 29 September)
• Re: [CSP2] connect-src 'self' and websockets (Monday, 28 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 23 September)
• [webappsec] Call for Consensus: COWL to FPWD (Monday, 21 September)
• Re: WebAppSec Teleconference Agenda 21-Sep-2015 (Monday, 21 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Thursday, 17 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 16 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 15 September)
• Re: Split the `w3c/webappsec` respository? (Wednesday, 9 September)
• Re: Split the `w3c/webappsec` respository? (Tuesday, 8 September)
• Re: [CSP2] How to restrict resources linking to (Thursday, 3 September)
• Re: Caching of web content based on hashes? (Thursday, 3 September)
• [webappsec] Next teleconference, 7-Sep-2015, CANCELLED (Wednesday, 2 September)
• [webappsec] CSP2 Implementation Report (Wednesday, 2 September)
• [webappsec] more CSP test review begging (Tuesday, 1 September)

Brian Smith

• Re: CSP3 as a polylithic set of modules? (Tuesday, 29 September)
• Re: CSP3 as a polylithic set of modules? (Monday, 28 September)
• Re: CSP3 as a polylithic set of modules? (Monday, 28 September)
• Re: SRI: edge case when loading the same stylesheet twice in a document (Friday, 18 September)

Christian Nygaard

• Re: Caching of web content based on hashes? (Saturday, 5 September)
• Re: Caching of web content based on hashes? (Thursday, 3 September)
• Caching of web content based on hashes? (Wednesday, 2 September)

Colin Gallagher

• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Thursday, 17 September)

Conrad Irwin

• Re: SRI: edge case when loading the same stylesheet twice in a document (Thursday, 17 September)

Craig Francis

• Re: [CSP2] How to restrict resources linking to (Wednesday, 2 September)

Daniel Veditz

• Re: [CSP2] connect-src 'self' and websockets (Monday, 28 September)
• WebAppSec Teleconference Agenda 21-Sep-2015 (Sunday, 20 September)
• Re: SRI: edge case when loading the same stylesheet twice in a document (Saturday, 19 September)

Dave Longley

• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Thursday, 24 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Thursday, 24 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Thursday, 24 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 23 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 23 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 23 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 23 September)
• Re: Coming back to CREDENTIAL. (Tuesday, 22 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 16 September)
• Re: Coming back to CREDENTIAL. (Monday, 14 September)
• Re: Coming back to CREDENTIAL. (Monday, 7 September)
• Re: Coming back to CREDENTIAL. (Wednesday, 2 September)
• Re: Coming back to CREDENTIAL. (Wednesday, 2 September)

Dave Raggett

• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Friday, 25 September)

David Ross

• Re: Split the `w3c/webappsec` respository? (Tuesday, 8 September)

Deian Stefan

• Re: Starting to create new repositories. (Wednesday, 30 September)
• Re: WebAppSec Teleconference Agenda 21-Sep-2015 (Monday, 21 September)
• Re: Split the `w3c/webappsec` respository? (Tuesday, 8 September)

Dick Hardt

• Re: Coming back to CREDENTIAL. (Monday, 7 September)

Eric Mill

• Re: Testing W3C's HTTPS setup (Monday, 21 September)
• Re: Testing W3C's HTTPS setup (Monday, 21 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 15 September)
• Re: Split the `w3c/webappsec` respository? (Wednesday, 9 September)

Francois Marier

• Re: SRI: data URIs and Blob URL (Thursday, 24 September)
• Re: SRI: edge case when loading the same stylesheet twice in a document (Monday, 21 September)
• Re: SRI: edge case when loading the same stylesheet twice in a document (Thursday, 17 September)
• Re: SRI: edge case when loading the same stylesheet twice in a document (Thursday, 17 September)
• SRI: edge case when loading the same stylesheet twice in a document (Wednesday, 16 September)
• Re: Automatic private browsing upgrades (Wednesday, 16 September)
• Re: Split the `w3c/webappsec` respository? (Tuesday, 8 September)
• Automatic private browsing upgrades (Thursday, 3 September)

fredericdelaporte@free.fr

• Re: [CSP2] browser behavior on frame-ancestors violation through previous iframe content navigation (Monday, 7 September)
• [CSP2] browser behavior on frame-ancestors violation through previous iframe content navigation (Friday, 4 September)

Frederik Braun

• Re: Starting to create new repositories. (Wednesday, 30 September)
• Re: SRI: edge case when loading the same stylesheet twice in a document (Thursday, 17 September)
• Re: Split the `w3c/webappsec` respository? (Friday, 11 September)
• Re: Split the `w3c/webappsec` respository? (Tuesday, 8 September)

GALINDO Virginie

• Re: SOP wiki was: A Somewhat Critical View of SOP (Same Origin Policy) (Monday, 28 September)

Göran AP Eriksson

• Re: [mixed-content] DASH Players and Mixed Content (Saturday, 19 September)
• Re: [mixed-content] DASH Players and Mixed Content (Tuesday, 8 September)

Harry Halpin

• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Thursday, 24 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Thursday, 24 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Thursday, 24 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 23 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 23 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 23 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 23 September)

Henry Story

• Re: SOP wiki was: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 30 September)
• Re: SOP wiki was: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 29 September)
• Re: SOP wiki was: A Somewhat Critical View of SOP (Same Origin Policy) (Monday, 28 September)
• SOP wiki was: A Somewhat Critical View of SOP (Same Origin Policy) (Monday, 28 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Friday, 25 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Friday, 25 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 23 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Saturday, 19 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Thursday, 17 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 16 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 16 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 16 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 16 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 15 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 15 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 15 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Monday, 14 September)

henry.story@bblfish.net

• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Thursday, 24 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 23 September)

Hodges, Jeff

• Re: SOP wiki was: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 29 September)
• Re: SOP wiki was: A Somewhat Critical View of SOP (Same Origin Policy) (Monday, 28 September)

Jacob Hoffman-Andrews

• Re: HSTS, mixed content, and priming (Monday, 21 September)

James M. Greene

• `iframe[@sandbox]`: "sandblaster" JS library for analysis/modification (Wednesday, 30 September)

Jeffrey Walton

• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Friday, 18 September)

Jeffrey Yasskin

• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 23 September)

Jerry Qu

• Re: [CSP2]Is there a directive dealing with the window.opener.location phishing concern? (Wednesday, 30 September)
• [CSP2]Is there a directive dealing with the window.opener.location phishing concern? (Wednesday, 30 September)
• Re: SRI: data URIs and Blob URL (Thursday, 24 September)
• SRI: data URIs and Blob URL (Wednesday, 23 September)

Jim Manico

• Re: CSP3 as a polylithic set of modules? (Tuesday, 29 September)
• Re: Testing W3C's HTTPS setup (Monday, 21 September)

Jochen Eisinger

• Re: Referrer value for resources fetched from CSS (Wednesday, 30 September)
• Re: Referrer value for resources fetched from CSS (Wednesday, 30 September)
• Re: Referrer value for resources fetched from CSS (Wednesday, 30 September)
• Re: Referrer value for resources fetched from CSS (Wednesday, 30 September)
• Re: Referrer value for resources fetched from CSS (Wednesday, 30 September)
• Re: Referrer value for resources fetched from CSS (Wednesday, 30 September)
• Re: Referrer value for resources fetched from CSS (Tuesday, 29 September)
• Re: Referrer value for resources fetched from CSS (Tuesday, 8 September)
• Re: Split the `w3c/webappsec` respository? (Tuesday, 8 September)

Joel Weinberger

• Re: CSP3 as a polylithic set of modules? (Monday, 28 September)
• Re: Split the `w3c/webappsec` respository? (Wednesday, 9 September)

John Wong

• Re: Password generation classes (Wednesday, 30 September)
• Re: Password generation classes (Wednesday, 30 September)

Jon Piesing

• RE: [mixed-content] DASH Players and Mixed Content (Friday, 18 September)

Jonathan Kingston

• Re: Password generation classes (Wednesday, 30 September)
• Fwd: Password generation classes (Wednesday, 30 September)
• Password generation classes (Wednesday, 30 September)
• Re: CSP3 as a polylithic set of modules? (Tuesday, 29 September)
• Re: SRI: edge case when loading the same stylesheet twice in a document (Friday, 18 September)
• Re: Split the `w3c/webappsec` respository? (Thursday, 10 September)

Jose Kahan

• Re: Testing W3C's HTTPS setup (Monday, 21 September)
• Re: Testing W3C's HTTPS setup (Monday, 21 September)
• Re: Re: Testing W3C's HTTPS setup (Monday, 21 September)

Kepeng Li

• Re: CSP 401 Issue (Thursday, 10 September)
• Re: CSP 401 Issue (Sunday, 6 September)

Mark Nottingham

• Re: Automatic private browsing upgrades (Tuesday, 8 September)

Martin Paljak

• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Thursday, 24 September)

Martin Thomson

• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 16 September)
• Re: Caching of web content based on hashes? (Thursday, 3 September)

Mike O'Neill

• Permissions API (Saturday, 26 September)

Mike West

• Re: [CSP2]Is there a directive dealing with the window.opener.location phishing concern? (Wednesday, 30 September)
• Starting to create new repositories. (Wednesday, 30 September)
• Re: CSP3 as a polylithic set of modules? (Wednesday, 30 September)
• Re: CSP3 as a polylithic set of modules? (Tuesday, 29 September)
• Re: CSP3 as a polylithic set of modules? (Tuesday, 29 September)
• Re: [CSP2] connect-src 'self' and websockets (Monday, 28 September)
• CSP3 as a polylithic set of modules? (Saturday, 26 September)
• Re: Permissions API (Saturday, 26 September)
• CfC: Transition "Secure Contexts" to CR; deadline October 1st. (Thursday, 24 September)
• Re: Testing W3C's HTTPS setup (Wednesday, 23 September)
• Re: Coming back to CREDENTIAL. (Tuesday, 22 September)
• Re: [webappsec] Call for Consensus: COWL to FPWD (Tuesday, 22 September)
• Re: WebAppSec Teleconference Agenda 21-Sep-2015 (Monday, 21 September)
• Re: Testing W3C's HTTPS setup (Monday, 21 September)
• Re: Testing W3C's HTTPS setup (Monday, 21 September)
• Re: Re: Testing W3C's HTTPS setup (Monday, 21 September)
• Re: WebAppSec Teleconference Agenda 21-Sep-2015 (Sunday, 20 September)
• Re: [mixed-content] DASH Players and Mixed Content (Friday, 18 September)
• Re: Automatic private browsing upgrades (Wednesday, 16 September)
• Re: Testing W3C's HTTPS setup (Tuesday, 15 September)
• Re: Coming back to CREDENTIAL. (Tuesday, 15 September)
• Re: Testing W3C's HTTPS setup (Monday, 14 September)
• Re: Automatic private browsing upgrades (Monday, 14 September)
• Re: [clear-site-data] clearing information about URLs visited (Monday, 14 September)
• Re: Split the `w3c/webappsec` respository? (Friday, 11 September)
• Re: Split the `w3c/webappsec` respository? (Friday, 11 September)
• Secure Contexts: It's worth taking another look. (Friday, 11 September)
• Re: Split the `w3c/webappsec` respository? (Thursday, 10 September)
• Re: CSP 401 Issue (Wednesday, 9 September)
• Re: Split the `w3c/webappsec` respository? (Wednesday, 9 September)
• CfC: Republish MIX as a CR; deadline Sept. 15th. (Tuesday, 8 September)
• Re: Referrer value for resources fetched from CSS (Tuesday, 8 September)
• Re: Split the `w3c/webappsec` respository? (Tuesday, 8 September)
• Split the `w3c/webappsec` respository? (Tuesday, 8 September)
• Re: Coming back to CREDENTIAL. (Tuesday, 8 September)
• Re: Automatic private browsing upgrades (Thursday, 3 September)
• Re: Coming back to CREDENTIAL. (Thursday, 3 September)
• Re: Coming back to CREDENTIAL. (Wednesday, 2 September)
• Re: Coming back to CREDENTIAL. (Wednesday, 2 September)
• Re: Coming back to CREDENTIAL. (Tuesday, 1 September)

Neil Matatall

• Re: Split the `w3c/webappsec` respository? (Wednesday, 9 September)

Nick Doty

• [clear-site-data] clearing information about URLs visited (Monday, 14 September)
• Re: Automatic private browsing upgrades (Monday, 14 September)

Nottingham, Mark

• Re: [mixed-content] DASH Players and Mixed Content (Tuesday, 22 September)
• Re: [mixed-content] DASH Players and Mixed Content (Friday, 18 September)
• Re: [mixed-content] DASH Players and Mixed Content (Thursday, 17 September)
• Re: [mixed-content] DASH Players and Mixed Content (Thursday, 17 September)

Oda, Terri

• Re: Split the `w3c/webappsec` respository? (Wednesday, 9 September)

Richard Barnes

• Re: Testing W3C's HTTPS setup (Monday, 21 September)
• Re: Automatic private browsing upgrades (Thursday, 3 September)
• Re: Caching of web content based on hashes? (Thursday, 3 September)
• Re: Automatic private browsing upgrades (Thursday, 3 September)
• Re: Caching of web content based on hashes? (Thursday, 3 September)

Rigo Wenning

• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Saturday, 26 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Saturday, 26 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Saturday, 26 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Saturday, 26 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Thursday, 17 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Thursday, 17 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Thursday, 17 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 16 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 16 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 16 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 15 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Monday, 14 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Monday, 14 September)

Siva Narendra

• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 23 September)

Tanvi Vyas

• Re: [CSP2]Is there a directive dealing with the window.opener.location phishing concern? (Wednesday, 30 September)
• Re: Referrer value for resources fetched from CSS (Monday, 28 September)
• Re: Testing W3C's HTTPS setup (Wednesday, 23 September)
• Re: SRI: edge case when loading the same stylesheet twice in a document (Monday, 21 September)
• Re: SRI: edge case when loading the same stylesheet twice in a document (Monday, 21 September)
• Re: CSP 401 Issue (Wednesday, 9 September)

Tony Arcieri

• Re: SOP wiki was: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 29 September)
• Re: SOP wiki was: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 29 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Friday, 25 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 16 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Wednesday, 16 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 15 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Monday, 14 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 1 September)
• Re: A Somewhat Critical View of SOP (Same Origin Policy) (Tuesday, 1 September)

Wendy Seltzer

• Re: Split the `w3c/webappsec` respository? (Thursday, 10 September)

Xueyuan Jia

• Call for Exclusions (Update): Entry Point Regulation (Wednesday, 9 September)

yao zhongxiao

• Re: [CSP2] How to restrict resources linking to (Wednesday, 2 September)
• Re: [CSP2] How to restrict resources linking to (Wednesday, 2 September)

Yoav Weiss

• Referrer value for resources fetched from CSS (Tuesday, 8 September)

Ángel González

• Re: Split the `w3c/webappsec` respository? (Wednesday, 9 September)
• Re: Caching of web content based on hashes? (Friday, 4 September)

Last message date: Wednesday, 30 September 2015 21:23:12 UTC