RE: ISSUE-132: Update Section 10.1 of wsc-xit with information from updated browser lock down wiki page

I would agree that a user should always be able to view and modify
security-related configuration settings, but that if a user agent does their
job correctly, it should not be necessary, especially for the user who would
have trouble understanding the kind of detailed security configuration
settings that one sees today in the Security tab

 

  _____  

From: public-wsc-wg-request@w3.org [mailto:public-wsc-wg-request@w3.org] On
Behalf Of Mary Ellen Zurko
Sent: Monday, November 26, 2007 11:36 AM
To: Web Security Context Working Group WG
Subject: Re: ISSUE-132: Update Section 10.1 of wsc-xit with information from
updated browser lock down wiki page

 


"A user agent MUST support a mode of operation whereby the user is unable to
view or modify the security-related configuration settings. "

It seems wrong to me that there is a mode where the user is unable to view
the security related configuration settings. In every context I've ever been
in, having some ability to get to more information if helpful. 

I would remove the "view or" part of this, unless I'm missing something.