Re: Draft finding - "Transitioning the Web to HTTPS"


On Tue, Dec 9, 2014 at 12:28 AM, Mark Nottingham <> wrote:

> We've started work on a new Finding, to a) serve as a Web version of the
> IAB statement, and b) support the work on Secure Origins in WebAppSec.
> See: <>
> Repo w/ issues list at <>.

This is excellent, thank you.

The WebAppSec work mentioned above is documented in We'd like to
rapidly move that document along, as other specifications have clear
dependencies on the concepts defined there. Feedback on the details would
be ever so excellent, either via public-webappsec@ or GitHub (

Mike West <>
Google+:, Twitter: @mikewest, Cell: +49 162 10 255 91

Google Germany GmbH, Dienerstrasse 12, 80331 München, Germany
Registergericht und -nummer: Hamburg, HRB 86891
Sitz der Gesellschaft: Hamburg
Geschäftsführer: Graham Law, Christine Elizabeth Flores
(Sorry; I'm legally required to add this exciting detail to emails. Bleh.)

Received on Tuesday, 9 December 2014 09:38:32 UTC