public-webappsec@w3.org from August 2014 by author

Adam Langley

Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)

Anne van Kesteren

Re: Defining secure-enough origins. (Sunday, 31 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Saturday, 23 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: [REFERRER] Naming none and null policies (Thursday, 21 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Wednesday, 20 August)
Re: [REFERRER] Naming none and null policies (Tuesday, 19 August)
Re: [REFERRER] Naming none and null policies (Tuesday, 19 August)
Re: [CSP] images loaded in object and embed (Tuesday, 19 August)
Re: Sending a `context` HTTP request header. (Monday, 18 August)
Re: [CSP] use csp-report-only to find out all content-type sniffing (Monday, 18 August)
Referrer: change from <meta> with respect to origin (Monday, 18 August)
Referrer vs CSP (Saturday, 16 August)
Referrer: typo (Saturday, 16 August)
Re: Comments on CSP Level 2 (Thursday, 14 August)
Re: [CSP] prevent 401 attach (Saturday, 9 August)
Re: Entry Point Regulation (EPR) for web apps (Wednesday, 6 August)
Re: [REFERRER] Where does "Determine request’s Referrer" get its URL from? (Friday, 1 August)

Antonio Sanso

Re: Paths and Redirects (Monday, 18 August)
Re: Paths and Redirects (Monday, 18 August)
Paths and Redirects (Friday, 15 August)

Austin William Wright

Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)

Boris Zbarsky

Re: Defining secure-enough origins. (Friday, 22 August)
Re: Defining secure-enough origins. (Friday, 22 August)
Re: Defining secure-enough origins. (Friday, 22 August)
Re: Defining secure-enough origins. (Friday, 22 August)
Re: Defining secure-enough origins. (Friday, 22 August)

Brad Hill

[webappsec] Concluding the Last Call period for CSP Level 2 (Wednesday, 27 August)
WebAppSec WG Teleconference 27-August-2014 08:00 PDT (Tuesday, 26 August)
Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 (Sunday, 3 August)

Brian Smith

Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 (Monday, 4 August)
Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 (Monday, 4 August)

Caleb Queern

Re: [CSP] feedback report-uri directive and report-only header (Thursday, 21 August)

Chris Palmer

Re: Defining secure-enough origins. (Monday, 25 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)
Re: Secure Origins and Strong Authentication (Thursday, 21 August)

Coralie Mercier

Call for Exclusions: Referrer Policy (Thursday, 7 August)

Daniel Veditz

[CSP] kill or delay child-src? (Wednesday, 27 August)
WASWG Teleconference Agenda 2014-08-13 0800 PDT (Wednesday, 13 August)
Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 (Friday, 1 August)

David Ross

Re: Entry Point Regulation (EPR) for web apps (Wednesday, 6 August)
Entry Point Regulation (EPR) for web apps (Tuesday, 5 August)

Deian Stefan

Re: CSP: 'no-external-navigation'? (Tuesday, 19 August)

Devdatta Akhawe

Re: CSP Level 2 last call comment (Thursday, 28 August)
Re: [CSP] may we have script-ancestors to protect JSONP call (Thursday, 28 August)
Re: [CSP] feedback sandbox ABNF grammar conflict (Monday, 11 August)

Dirk Schulze

Re: [CSP] images loaded in object and embed (Tuesday, 19 August)

Dmitry Polyakov

[CSP] Dynamic CSP (Monday, 11 August)

Eduardo' Vela\

Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Wednesday, 20 August)

Frederik Braun

[CSP] Regarding style-src unsafe-eval and CSSOM (Thursday, 28 August)
Re: [CSP] Compatibility with 1.1 or 1.0 (Thursday, 28 August)
Re: Entry Point Regulation (EPR) for web apps (Wednesday, 6 August)

Giorgio Maone

Regrets (Re: WebAppSec WG Teleconference 27-August-2014 08:00 PDT) (Wednesday, 27 August)
Re: Entry Point Regulation (EPR) for web apps (Thursday, 7 August)
Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 (Friday, 1 August)

Glenn Adams

Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 (Sunday, 3 August)

Hatter Jiang

[CSP] prevent 401 attach (Friday, 8 August)

Hatter Jiang OWS

Re: [CSP] may we have script-ancestors to protect JSONP call (Thursday, 28 August)
[CSP] may we have script-ancestors to protect JSONP call (Wednesday, 27 August)
[CSP] use csp-report-only to find out all content-type sniffing (Saturday, 16 August)

Hill, Brad

CSP Level 2 last call comment (Wednesday, 27 August)
RE: [CSP] feedback report-uri directive and report-only header (Thursday, 21 August)

Ian Melven

Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)

Jeffrey Walton

OT: Technical Considerations for Vetting 3rd Party Mobile Applications (Saturday, 23 August)
Secure origins, high value code and data, and CAs providing reputational service (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Secure Origins and Strong Authentication (Wednesday, 20 August)

Jeffrey Yasskin

Re: Defining secure-enough origins. (Thursday, 28 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)

Jim Manico

[CSP] Compatibility with 1.1 or 1.0 (Thursday, 28 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Wednesday, 20 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Wednesday, 20 August)

John Kemp

Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)

Jonas Sicking

Re: [CSP] Regarding style-src unsafe-eval and CSSOM (Thursday, 28 August)

Kevin Hill

LAST CALL (Wednesday, 27 August)
RE: [CSP] Section 5.1 Workers, is this missing a case? (Thursday, 21 August)
[CSP] Section 5.1 Workers, is this missing a case? (Monday, 18 August)
[CSP] images loaded in object and embed (Monday, 18 August)
RE: Last call CSP Level 2 (Wednesday, 13 August)
Last call CSP Level 2 (Wednesday, 13 August)

Mark Watson

Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Wednesday, 20 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Wednesday, 20 August)
re: Proposal: Prefer secure origins for powerful new web platform features (Wednesday, 20 August)

Martin Thomson

CSP for WebRTC (Thursday, 28 August)

Michal Zalewski

Re: Secure origins, high value code and data, and CAs providing reputational service (Saturday, 23 August)

Mike West

Re: Defining secure-enough origins. (Friday, 22 August)
Re: Defining secure-enough origins. (Friday, 22 August)
Re: Defining secure-enough origins. (Friday, 22 August)
Re: Defining secure-enough origins. (Friday, 22 August)
Re: Defining secure-enough origins. (Friday, 22 August)
Re: [CSP] Section 5.1 Workers, is this missing a case? (Friday, 22 August)
Defining secure-enough origins. (Friday, 22 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)
Re: Proposal: Prefer secure origins for powerful new web platform features (Thursday, 21 August)
Re: [REFERRER] Naming none and null policies (Tuesday, 19 August)
Re: [REFERRER] Naming none and null policies (Tuesday, 19 August)
Re: [CSP] Section 5.1 Workers, is this missing a case? (Tuesday, 19 August)
Re: [CSP] images loaded in object and embed (Tuesday, 19 August)
Re: Referrer: change from <meta> with respect to origin (Monday, 18 August)
Re: Comments on CSP Level 2 (Monday, 18 August)
Sending a `context` HTTP request header. (Monday, 18 August)
Re: [CSP] use csp-report-only to find out all content-type sniffing (Monday, 18 August)
Re: Paths and Redirects (Monday, 18 August)
Re: Referrer: typo (Monday, 18 August)
Re: Referrer vs CSP (Monday, 18 August)
Re: [CSP] feedback sandbox ABNF grammar conflict (Monday, 18 August)
Re: Last call CSP Level 2 (Wednesday, 13 August)
Re: [CSP] feedback sandbox ABNF grammar conflict (Monday, 11 August)
PSA: CSP2 last call ends Wednesday. (Monday, 11 August)

Nottingham, Mark

Re: Comments on CSP Level 2 (Tuesday, 19 August)
Re: Comments on CSP Level 2 (Thursday, 14 August)
Comments on CSP Level 2 (Thursday, 14 August)

Philip Constantinou

Re: [CSP] Request to amend bookmarklet/extensions sentence in CSP1.1 (Friday, 1 August)

Simon Pieters

Re: [MIX]: Can we distinguish between images loader via `<picture>`/`srcset` and `<img>`? (Monday, 4 August)

Stefan Ossendorf

[CSP] feedback report-uri directive and report-only header (Thursday, 21 August)
RE: [CSP] feedback sandbox ABNF grammar conflict (Monday, 18 August)
AW: [CSP] feedback sandbox ABNF grammar conflict (Tuesday, 12 August)
[CSP] feedback sandbox ABNF grammar conflict (Sunday, 10 August)

Web Application Security Working Group Issue Tracker

ISSUE-66: No-external-navigation as potential csp3 feature http://lists.w3.org/archives/public/public-webappsec/2014aug/0053.html (Wednesday, 27 August)
ISSUE-65: Does "no referrer" specify a state or is it a token? is a token with a space problematic? (Wednesday, 27 August)
ISSUE-64: Csp3 how to deal with large policies needed by single-page webapps (http://lists.w3.org/archives/public/public-webappsec/2014aug/0021.html) (Wednesday, 27 August)
ISSUE-63: Disposition of ch-csp client hint (Wednesday, 27 August)

Wendy Seltzer

Re: WebAppSec WG Teleconference 27-August-2014 08:00 PDT (Wednesday, 27 August)
Re: WASWG Teleconference Agenda 2014-08-13 0800 PDT (Wednesday, 13 August)

Ángel

[REFERRER] Naming none and null policies (Monday, 18 August)

Last message date: Sunday, 31 August 2014 17:02:36 UTC