[webappsec] very rough draft of an anti-clicjacking spec attached

Lots of work to do here - lots and lots - but I wanted to get the ball rolling on the conversation with IETF WebSec and HTTP about where to go with the Frame Options directives.

Having some spec text and associated "next steps" that give a good reason to roll it into CSP will hopefully give us a bit more traction in getting interest and response from those folks.

David and Giorgio - Carine Bournez <carine@w3.org<mailto:carine@w3.org>> can help you if you want to move this into the official repository, she knows from me that you are the Editors.  Adam can perhaps provide some tips on the toolchain as well.

Have a good month, everybody, and I'll talk to you again in July!

-Brad