- From: Adam Barth <w3c@adambarth.com>
- Date: Mon, 14 Dec 2009 14:38:27 -0800
- To: Tyler Close <tyler.close@gmail.com>
- Cc: Maciej Stachowiak <mjs@apple.com>, Jonathan Rees <jar@creativecommons.org>, "Mark S. Miller" <erights@google.com>, Jonas Sicking <jonas@sicking.cc>, Arthur Barstow <Art.Barstow@nokia.com>, Ian Hickson <ian@hixie.ch>, Anne van Kesteren <annevk@opera.com>, public-webapps <public-webapps@w3.org>
On Mon, Dec 14, 2009 at 2:13 PM, Tyler Close <tyler.close@gmail.com> wrote: > For example, the > User Consent Phase and Grant Phase above could be replaced by a single > copy-paste operation by the user. Any design that involves storing confidential information in the clipboard is insecure because IE lets arbitrary web sites read the user's clipboard. You can judge that to be a regrettable choice by the IE team, but it's just a fact of the world. Adam
Received on Monday, 14 December 2009 22:39:19 UTC