Re: Proposal: Security checks after same-origin revocation with document.domain from Ian Hickson on 2012-04-13 (public-script-coord@w3.org from April to June 2012)

From: Ian Hickson <ian@hixie.ch>
Date: Fri, 13 Apr 2012 21:56:06 +0000 (UTC)
To: Bobby Holley <bobbyholley@gmail.com>
cc: public-script-coord@w3.org, w3c@adambarth.com, Boris Zbarsky <bzbarsky@mit.edu>, Johnny Stenback <jst@mozilla.com>, Blake Kaplan <mrbkap@mozilla.com>, Daniel Veditz <dveditz@mozilla.com>
Message-ID: <Pine.LNX.4.64.1204132154460.22654@ps20323.dreamhostps.com>

On Fri, 13 Apr 2012, Bobby Holley wrote:
> 
> I think this is suboptimal behavior. If we value revocation enough to 
> spec it [...]

I don't think we do. It's only specced because that's what browsers did, 
and I try to spec what browsers do.

-- 
Ian Hickson               U+1047E                )\._.,--....,'``.    fL
http://ln.hixie.ch/       U+263A                /,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'

Received on Friday, 13 April 2012 21:56:31 UTC