public-webappsec@w3.org from February 2015 by subject

[CSP] Clarifications on nonces

[CSP] Dynamic CSP

[MIX] 4 possible solutions to the problem of Mixed Content Blocking stalling HTTPS deployment

[MIX] Require HTTPS scripts to be able to anything HTTP scripts can do.

[Referrer] Adding a referrer attribute delivery mechanism

[SRI] unsupported hashes and invalid metadata

[Unbearable] IETF seeking feedback on proposed "Token Binding" Working Group

[webappsec] agenda - coming soon

[webappsec] Teleconference Agenda, 09-Feb-2015

[webappsec] Teleconference Agenda, 23-Feb-2015

Always on SSL

An HTTP->HTTPS upgrading strawman. (was Re: Upgrade mixed content URLs through HTTP header)

Asynchronous decision making (Re: WebAppSec re-charter status)

BIKESHED: Rename "Powerful features"?

CfC approved: CSP Level 2 to Candidate Recommendation

CfC to publish FPWD of "Upgrade Insecure Resources"; Deadline Feb 17th.

CfC to publish FPWD of CSP Pinning; deadline Feb. 9th

CfC: Transition CSP2 to CR.

CfC: Transition Mixed Content to CR; deadline Feb 23rd.

CORS explained simply

CORS performance

CORS performance proposal

Credentials Management API & multiple-credentials.

CSP: Drop IP-matching? (was Re: [CSP] URI/IRI normalization and comparison)

draft minutes from 23-Feb teleconference available

Entry Point Regulation vs Simpler Solutions (was Re: WebAppSec re-charter status)

Fetch, MSE, and MIX

Follow-up to TAG meeting on Powerful Features

IETF seeking feedback on proposed "Token Binding" Working Group

iframe sandbox for third-party widgets and ads (was Re: [CSP] Clarifications on nonces)

Intent to deprecate: Insecure usage of powerful features

Issues with reflected-xss (was Re: CfC: Transition CSP2 to CR.)

last charter update

Private Devices and IoT (was Proposal: Marking HTTP As Non-Secure)

Process? (was Re: CfC to publish FPWD of "Upgrade Insecure Resources"; Deadline Feb 17th.)

Proposal: A pinning mechanism for CSP?

referrer spec and backwards compatibility

Requiring Authenticated Origins for Geolocation API's: Status

RfC: Manifest for web application; review deadline March 5

Server Certificates, Internal Names, and Browser support after October 2016

Service Workers and MIX (was Re: MIX: Exiting last call?)

Signed CSP

Upgrade mixed content URLs through HTTP header

UPGRADE: Feature detection?

UPGRADE: Goals? (was Re: CfC to publish FPWD of "Upgrade Insecure Resources"; Deadline Feb 17th.)

WebAppSec re-charter status

webappsec-ACTION-212: Issue cfc to take mixed content to cr

webappsec-ACTION-213: Reply to brian smith re: csp2 to cr

webappsec-ACTION-214: Ask mozilla ac rep about the current status of their charter objections

why does plugin-types inherit to nested browsing contexts?

Last message date: Friday, 27 February 2015 18:21:56 UTC