- From: Adam Barth <w3c@adambarth.com>
- Date: Thu, 9 Apr 2009 12:37:50 -0700
- To: Bil Corry <bil@corry.biz>
- Cc: Ian Hickson <ian@hixie.ch>, public-webapps@w3.org
On Thu, Apr 9, 2009 at 8:48 AM, Bil Corry <bil@corry.biz> wrote: > My point is that a robust Origin moves us closer to better security controls, perhaps not all the way, but certainly much closer than CORS-Origin gets us. I think we should focus on clear use cases and techniques that address those use cases. For example, Mozilla-Origin is useful for mitigating ClickJacking whereas CORS-Origin is not. Adam
Received on Thursday, 9 April 2009 19:38:43 UTC