Re: file sharing services

• From: Jonas Sicking <jonas@sicking.cc>
• Date: Thu, 1 Dec 2011 15:48:07 -0800
• To: Charles Pritchard <chuck@jumis.com>
• Cc: Yehuda Katz <wycats@gmail.com>, "Tab Atkins Jr." <jackalmage@gmail.com>, Nicolas Mollet <nico.mollet@gmail.com>, public-webapps@w3.org
• Message-ID: <CA+c2ei_abgp4AhLVP0FWEpuM0=5WBXdaL3vSHtuGu0Gg3Po5KA@mail.gmail.com>

On Thu, Dec 1, 2011 at 1:51 PM, Charles Pritchard <chuck@jumis.com> wrote:
> There are serious security implications for enabling CORS, even with
> session-less requests.
> It's going to be a very long opt-in process for file sharing services.

This is a very strong statement backed up by absolutely no information
or data at all. Not very convincing.

Please clarify what you are referring to.

/ Jonas

Received on Thursday, 1 December 2011 23:49:12 UTC