W3C home > Mailing lists > Public > public-webappsec@w3.org > February 2015

Re: CSP: Drop IP-matching? (was Re: [CSP] URI/IRI normalization and comparison)

From: Martin Thomson <martin.thomson@gmail.com>
Date: Thu, 5 Feb 2015 10:15:27 +1100
Message-ID: <CABkgnnUmDHw6Ne0HQoEz-oyetnfFav2+Z4FaO-5+isQ1rMW9iw@mail.gmail.com>
To: Mike West <mkwst@google.com>
Cc: "Oda, Terri" <terri.oda@intel.com>, Anne van Kesteren <annevk@annevk.nl>, "public-webappsec@w3.org" <public-webappsec@w3.org>
On 4 February 2015 at 21:24, Mike West <mkwst@google.com> wrote:
> My justification for allowing IPv4 is not IoT in itself, but the fact that
> IPv4 is being used today, by the
> internet-of-things-that-happen-to-be-webservers-in-datacenters.

Can you explain how those iotthtbwid devices might benefit from CSP?
I don't want to be obtuse, but I'm not seeing a case there.
Received on Wednesday, 4 February 2015 23:15:54 UTC

This archive was generated by hypermail 2.3.1 : Monday, 23 October 2017 14:54:10 UTC