Brian, Crispin, and Mark have all expressed various degrees of displeasure
with the "powerful features" name, arguing that it invites debate about the
word "powerful" rather than the content of the spec (I'm paraphrasing: see
https://lists.w3.org/Archives/Public/public-webappsec/2015Feb/0304.html for
a more detailed description).
Mark suggested "HTTP-unsafe" to get the conversation started. I'm not a
huge fan of that formulation, as it seems equally question-begging.
If the normative focus of the specification is going to be the details in
https://w3c.github.io/webappsec/specs/powerfulfeatures/#algorithms, and not
the discussion in
https://w3c.github.io/webappsec/specs/powerfulfeatures/#is-feature-powerful,
then renaming the spec "Sufficiently Secure Contexts" might make sense. We
could then drop the term "powerful" entirely in
https://w3c.github.io/webappsec/specs/powerfulfeatures/#is-feature-powerful,
and land on the verbose-but-tautologically-correct "Features which are only
available in sufficiently secure contexts"?
WDYT?
--
Mike West <mkwst@google.com>, @mikewest
Google Germany GmbH, Dienerstrasse 12, 80331 München,
Germany, Registergericht und -nummer: Hamburg, HRB 86891, Sitz der
Gesellschaft: Hamburg, Geschäftsführer: Graham Law, Christine Elizabeth
Flores
(Sorry; I'm legally required to add this exciting detail to emails. Bleh.)