- From: Mary Ellen Zurko <Mary_Ellen_Zurko@notesdev.ibm.com>
- Date: Tue, 19 Jun 2007 12:35:07 -0400
- To: Chris Drake <christopher@pobox.com>
- Cc: public-usable-authentication@w3.org
- Message-ID: <OF61578E8A.4D65F7C2-ON852572FF.005AF085-852572FF.005B1251@LocalDomain>
Thanks Chris. Since the scope derives directly from the charter, your
comment does not apply to WSC (which is defined by the charter), but to
your desire for some other group (WG or otherwise) that would take your
stated, laudible goal on.
Mez
Chris Drake <christopher@pobox.com>
Sent by: public-usable-authentication-request@w3.org
06/19/2007 10:54 AM
To
public-usable-authentication@w3.org
cc
Subject
Comments Universal Design review of WSC Draft
Hi,
I present just one review comment - the exclusive nature of the scope
renders much of the rest of the document largely pointless.
Victims care about not becoming victims. They're not interested in
only avoiding becoming a victim in a predefined narrow set of
circumstances. They just want to be safe.
It *should* be the simple goal of any WSC draft to propose genuine
usable solutions that protect potential victims in as many hostile
situations as possible.
Good: Follow these recommendations, and your users will be safe.
Bad: Follow these recommendations, and attackers will adjust to
taking advantage of your users using slightly different
techniques to before.
There are a lot of experts and smart people on this list. While I
sympathize with the enormity of the task involved in correcting the
goals and scope of this document, I think it's well worth while, since
this is the last time you'll be able to seriously access these
professionals and their experience in order to produce a work that
could do some serious good to the world.
Kind Regards,
Chris Drake
Received on Tuesday, 19 June 2007 16:35:02 UTC