W3C home > Mailing lists > Public > public-webappsec@w3.org > September 2015

Re: [mixed-content] DASH Players and Mixed Content

From: Anne van Kesteren <annevk@annevk.nl>
Date: Fri, 18 Sep 2015 17:25:30 +0200
Message-ID: <CADnb78hENL1o59xiRctscijkgsWFof-ah-wp5fS3HWCc8UYKkA@mail.gmail.com>
To: Jon Piesing <Jon.Piesing@tpvision.com>
Cc: "Nottingham, Mark" <mnotting@akamai.com>, Brad Hill <hillbrad@gmail.com>, Ben Gidley <ben@gidley.co.uk>, "public-webappsec@w3.org" <public-webappsec@w3.org>
On Fri, Sep 18, 2015 at 5:00 PM, Jon Piesing <Jon.Piesing@tpvision.com> wrote:
> It's a pity that, in spite of its general benefits, Mixed Content seems to cause significant collateral damage to MSE.

To be clear, Mixed Content is a bug. If we started today it would
never be allowed. It seems very unlikely to me we'd allow reading the
contents of Mixed Content resources. That'd be making a hole that we
want to close bigger.

Received on Friday, 18 September 2015 15:25:55 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:54:51 UTC