public-web-security@w3.org from December 2009 by subject

ACS (was Re: Seamless iframes + CSS3 selectors = bad idea)

Aryeh's comment thread wrt Strict Transport Security (STS)

Bil's comment thread wrt Strict Transport Security (STS)

call for reviewers: XMLHttpRequest Last Call

Cross Site Attacks

Feedback on the Strict-Transport-Security specification (Adam)

Feedback on the Strict-Transport-Security specification (EricLaw)

Feedback on the Strict-Transport-Security specification (part 1)

Feedback on the Strict-Transport-Security specification (part 2)

following up on STS feedback -- draft-hodges-strict-transport-sec-06.plain.html

fyi: original thread: HTTPbis and the Same Origin Policy

fyi: wiki/Same_Origin_Policy linked-to by Browser Security Handbook (BSH)

Handling multiple headers when only one is allowed

HTTP Mutual-auth proposal status / HTTP AUTH meet-up in Anaheim?

HTTPbis and the Same Origin Policy

javascript URIs on stylesheets/redirections

Jonas' comment thread wrt Strict Transport Security (STS)

Mobile Security barcamp - 19th January 2010, Sophia Antipolis

more flexible ABNF for STS? (=JeffH)

Other CSS attacks (Navigation monitor / History crawler / LAN scanner + attack )

related security models to same origin policy

Request for Comments: LCWD of Widget Access Request Policy spec; deadline 13-Jan-2010

Risks from CSS injection

Same origin CSS selector attacks

Sandboxed iframes (was Re: Seamless iframes + CSS3 selectors = bad idea)

Sandboxed Scripts and Styles on HTML / comments? (idea?)

Seamless iframes + CSS3 selectors = bad idea

STS and "mixed content" (Part 3 of Re: Feedback on the Strict-Transport-Security specification)

STS and lockCA (Gerv)

STS and lockCA and EVonly (was: STS and lockCA (Gerv))

STS user-agent processing and new max-age values

The Origin header (was Re: HTTPbis and the Same Origin Policy)

UI issues for security consideration

Welcome to the W3C web security mailing list

What is the same-origin policy for (was Re: The Origin header)

wiki/Same_Origin_Policy

wrt wiki/Strict_Transport_Security

Last message date: Tuesday, 29 December 2009 06:51:15 UTC