Re: Request for Change to CSP Specification from Daniel Veditz on 2011-12-10 (public-web-security@w3.org from December 2011)

From: Daniel Veditz <dveditz@mozilla.com>
Date: Fri, 9 Dec 2011 18:50:40 -0800 (PST)
To: sird@rckc.at
Cc: Jason Franklin <jfrankli@cs.cmu.edu>, public-web-security@w3.org, Devdatta Akhawe <dev.akhawe@gmail.com>
Message-ID: <1175577178.58711.1323485440139.JavaMail.root@zimbra1.shared.sjc1.mozilla.com>

> We added CSP to Google+ to detect instances of Mixed Content, and with
> the current report data its just marginally useful.
> 
> I agree with Jason.

What improvements would you like to see in the report data? I don't see how the ability to send "marginally useful" data somewhere new solves your problem.

-Dan Veditz

Received on Saturday, 10 December 2011 02:51:09 UTC