W3C home > Mailing lists > Public > public-webappsec@w3.org > January 2015

Re: Accessibility of security indicators

From: Mike West <mkwst@google.com>
Date: Thu, 8 Jan 2015 14:17:41 +0100
Message-ID: <CAKXHy=d1RTPH7TGWk1Ez5C0TEk7fXxm8WKzEn0NSWOz69L9mZA@mail.gmail.com>
To: Chaals from Yandex <chaals@yandex-team.ru>
Cc: WebAppSec WG <public-webappsec@w3.org>
It's certainly an important question, but probably one that's best
addressed by filing bugs against individual browser vendors rather than
mandating something in a spec. I've just filed https://crbug.com/447191,
for instance.

That said,
https://w3c.github.io/webappsec/specs/mixedcontent/#requirements-ux has a
normative requirement to make security indicators accessible, based on the
thread here:
http://lists.w3.org/Archives/Public/public-webappsec/2014Dec/0042.html. Do
you think we should say more there? Are there other specs the group has
produced which should contain similar statements?


Mike West <mkwst@google.com>, @mikewest

Google Germany GmbH, Dienerstrasse 12, 80331 München,
Germany, Registergericht und -nummer: Hamburg, HRB 86891, Sitz der
Gesellschaft: Hamburg, Geschäftsführer: Graham Law, Christine Elizabeth
(Sorry; I'm legally required to add this exciting detail to emails. Bleh.)

On Thu, Jan 8, 2015 at 12:55 PM, <chaals@yandex-team.ru> wrote:

> Hi,
> as far as I know, there is no indication of the security of a page
> available to e.g. screenreader users.
> Given that browser developers seem to be highly responsive to security
> concerns, perhaps we should be investing a little time in making sure that
> the ?1% of blind users who cannot see the padlock can get something from it.
> While we are at it, we might want to consider people using screen
> magnification, who often lose the part of the screen where the padlock is
> from their view.
> Of course this means talking to the people who make the relevant software
> as well as the browser makers. But I thought it would be useful to try
> starting the conversation.
> cheers
> --
> Charles McCathie Nevile - web standards - CTO Office, Yandex
> chaals@yandex-team.ru - - - Find more at http://yandex.com
Received on Thursday, 8 January 2015 13:18:32 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:54:44 UTC