public-webappsec@w3.org from February 2015 by thread

Intent to deprecate: Insecure usage of powerful features Joel Weinberger (Thursday, 26 February)

Requiring Authenticated Origins for Geolocation API's: Status Mandyam, Giridhar (Wednesday, 25 February)

why does plugin-types inherit to nested browsing contexts? Emily Stark (Wednesday, 25 February)

Re: [MIX] Require HTTPS scripts to be able to anything HTTP scripts can do. Tim Berners-Lee (Wednesday, 25 February)

draft minutes from 23-Feb teleconference available Brad Hill (Monday, 23 February)

last charter update Brad Hill (Monday, 23 February)

webappsec-ACTION-214: Ask mozilla ac rep about the current status of their charter objections Web Application Security Working Group Issue Tracker (Monday, 23 February)

[webappsec] Teleconference Agenda, 23-Feb-2015 Brad Hill (Monday, 23 February)

[webappsec] agenda - coming soon Brad Hill (Monday, 23 February)

Private Devices and IoT (was Proposal: Marking HTTP As Non-Secure) Jeffrey Walton (Sunday, 22 February)

Fetch, MSE, and MIX Ryan Sleevi (Friday, 20 February)

CORS explained simply henry.story@bblfish.net (Thursday, 19 February)

CORS performance proposal Anne van Kesteren (Thursday, 19 February)

BIKESHED: Rename "Powerful features"? Mike West (Wednesday, 18 February)

CORS performance Anne van Kesteren (Tuesday, 17 February)

Re: Service Workers and MIX (was Re: MIX: Exiting last call?) Brian Smith (Tuesday, 17 February)

Follow-up to TAG meeting on Powerful Features Wendy Seltzer (Monday, 16 February)

CfC: Transition Mixed Content to CR; deadline Feb 23rd. Mike West (Monday, 16 February)

Signed CSP Scott Arciszewski (Sunday, 15 February)

RfC: Manifest for web application; review deadline March 5 Arthur Barstow (Friday, 13 February)

Entry Point Regulation vs Simpler Solutions (was Re: WebAppSec re-charter status) Brian Smith (Thursday, 12 February)

[Referrer] Adding a referrer attribute delivery mechanism Francois Marier (Thursday, 12 February)

UPGRADE: Feature detection? Mike West (Wednesday, 11 February)

Process? (was Re: CfC to publish FPWD of "Upgrade Insecure Resources"; Deadline Feb 17th.) Mike West (Wednesday, 11 February)

UPGRADE: Goals? (was Re: CfC to publish FPWD of "Upgrade Insecure Resources"; Deadline Feb 17th.) Mike West (Wednesday, 11 February)

IETF seeking feedback on proposed "Token Binding" Working Group Arthur Barstow (Wednesday, 11 February)

Credentials Management API & multiple-credentials. rektide@voodoowarez.com (Tuesday, 10 February)

Always on SSL Ben Wilson (Tuesday, 10 February)

CfC to publish FPWD of "Upgrade Insecure Resources"; Deadline Feb 17th. Mike West (Tuesday, 10 February)

CfC approved: CSP Level 2 to Candidate Recommendation Brad Hill (Monday, 9 February)

webappsec-ACTION-213: Reply to brian smith re: csp2 to cr Web Application Security Working Group Issue Tracker (Monday, 9 February)

webappsec-ACTION-212: Issue cfc to take mixed content to cr Web Application Security Working Group Issue Tracker (Monday, 9 February)

iframe sandbox for third-party widgets and ads (was Re: [CSP] Clarifications on nonces) Brian Smith (Monday, 9 February)

Re: [CSP] Clarifications on nonces Brian Smith (Monday, 9 February)

referrer spec and backwards compatibility Devdatta Akhawe (Monday, 9 February)

Issues with reflected-xss (was Re: CfC: Transition CSP2 to CR.) Brian Smith (Monday, 9 February)

[webappsec] Teleconference Agenda, 09-Feb-2015 Brad Hill (Monday, 9 February)

Re: [SRI] unsupported hashes and invalid metadata Devdatta Akhawe (Sunday, 8 February)

Re: CfC: Transition CSP2 to CR. Mike West (Friday, 6 February)

WebAppSec re-charter status Wendy Seltzer (Wednesday, 4 February)

Re: CSP: Drop IP-matching? (was Re: [CSP] URI/IRI normalization and comparison) Oda, Terri (Wednesday, 4 February)

An HTTP->HTTPS upgrading strawman. (was Re: Upgrade mixed content URLs through HTTP header) Mike West (Tuesday, 3 February)

[MIX] 4 possible solutions to the problem of Mixed Content Blocking stalling HTTPS deployment Peter Eckersley (Tuesday, 3 February)

Upgrade mixed content URLs through HTTP header Anne van Kesteren (Monday, 2 February)

Re: [CSP] Dynamic CSP Yoav Weiss (Monday, 2 February)

CfC to publish FPWD of CSP Pinning; deadline Feb. 9th Mike West (Monday, 2 February)

Server Certificates, Internal Names, and Browser support after October 2016 Jeffrey Walton (Monday, 2 February)

Re: Proposal: A pinning mechanism for CSP? Daniel Veditz (Sunday, 1 February)

Last message date: Friday, 27 February 2015 18:21:56 UTC