public-webappsec@w3.org from September 2016 by author

Anders Rundgren

• Re: `localhost` as Secure Context, take 2 (was Re: CfC: Transition "Secure Contexts" to CR; deadline August 2nd.) (Thursday, 29 September)

Anne van Kesteren

• Re: Restrict loopback address to Secure Contexts? (Wednesday, 28 September)
• Re: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• Re: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• Re: On the Insecurity of Whitelists and the Future of CSP (Thursday, 8 September)
• Re: On the Insecurity of Whitelists and the Future of CSP (Thursday, 8 September)
• Re: Quoted Referrer-Policy values (Wednesday, 7 September)
• Re: Quoted Referrer-Policy values (Wednesday, 7 September)

Artur Janc

• Re: CSP tools and documentation (Tuesday, 27 September)
• CSP tools and documentation (Monday, 26 September)
• Re: Isolate-Me explainer (Tuesday, 20 September)
• Re: Isolate-Me explainer (Monday, 19 September)
• Re: 'strict-dynamic' syntax (was Re: On the Insecurity of Whitelists and the Future of CSP) (Friday, 9 September)
• Re: 'strict-dynamic' syntax (was Re: On the Insecurity of Whitelists and the Future of CSP) (Thursday, 8 September)
• Re: On the Insecurity of Whitelists and the Future of CSP (Thursday, 8 September)
• Re: On the Insecurity of Whitelists and the Future of CSP (Thursday, 8 September)
• Re: On the Insecurity of Whitelists and the Future of CSP (Thursday, 8 September)
• Re: On the Insecurity of Whitelists and the Future of CSP (Wednesday, 7 September)

Bill Scannell

• Autoclave (Friday, 16 September)

Brad Hill

• Re: remote participation for today's session (Friday, 23 September)
• remote participation for today's session (Thursday, 22 September)
• Re: WebAppSec and Auto WG discussion during TPAC (Wednesday, 21 September)
• Re: WebAppSec and Auto WG discussion during TPAC (Wednesday, 21 September)
• remote participation for TPAC (Wednesday, 21 September)
• Re: Call on 9/21 (Tuesday, 20 September)
• [webappsec] WG Note: CORS for developers (Tuesday, 13 September)
• [webappsec] draft agenda for tomorrow's teleconference (Tuesday, 6 September)

Charlie Reis

• Re: Isolate-Me explainer (Tuesday, 20 September)

Christoph Kerschbaumer

• Re: On the Insecurity of Whitelists and the Future of CSP (Thursday, 8 September)
• Re: On the Insecurity of Whitelists and the Future of CSP (Thursday, 8 September)

Craig Francis

• Re: CSP tools and documentation (Tuesday, 27 September)
• Re: Isolate-Me explainer (Tuesday, 20 September)
• Re: On the Insecurity of Whitelists and the Future of CSP (Thursday, 8 September)

Crispin Cowan

• RE: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• RE: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• RE: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• RE: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• RE: Restrict loopback address to Secure Contexts? (Monday, 26 September)
• RE: Restrict loopback address to Secure Contexts? (Monday, 26 September)
• RE: Isolate-Me explainer (Wednesday, 21 September)
• RE: Isolate-Me explainer (Tuesday, 20 September)
• Call on 9/21 (Monday, 19 September)
• RE: Isolate-Me explainer (Monday, 19 September)

Dan Kaminsky

• Re: Autoclave (Saturday, 17 September)
• Re: Autoclave (Saturday, 17 September)

Daniel Veditz

• Fwd: DRM protest timed with TPAC 2016 (Saturday, 17 September)
• Re: 'strict-dynamic' syntax (was Re: On the Insecurity of Whitelists and the Future of CSP) (Wednesday, 14 September)
• Re: [SRI] require-sri-for: missing integrity metadata? same-origin loads? (Friday, 9 September)
• Re: CSP: Embedded Enforcement (Friday, 9 September)
• Re: 'strict-dynamic' syntax (was Re: On the Insecurity of Whitelists and the Future of CSP) (Friday, 9 September)
• Re: On the Insecurity of Whitelists and the Future of CSP (Thursday, 8 September)
• Re: On the Insecurity of Whitelists and the Future of CSP (Thursday, 8 September)
• Re: On the Insecurity of Whitelists and the Future of CSP (Thursday, 8 September)

Deian Stefan

• Re: Workshop on Web Application Security 2016 Stanford University, Sep. 9, 2016 (Tuesday, 20 September)
• Call availability during TPAC? (Tuesday, 20 September)

Devdatta Akhawe

• Re: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• Re: [SRI] require-sri-for: missing integrity metadata? same-origin loads? (Monday, 12 September)

Eduardo' Vela\

• Re: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• Re: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• Re: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• Re: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)

Emily Stark (Dunn)

• Re: `localhost` as Secure Context, take 2 (was Re: CfC: Transition "Secure Contexts" to CR; deadline August 2nd.) (Thursday, 29 September)
• Re: `localhost` as Secure Context, take 2 (was Re: CfC: Transition "Secure Contexts" to CR; deadline August 2nd.) (Wednesday, 28 September)
• Re: Isolate-Me explainer (Wednesday, 21 September)
• Re: Isolate-Me explainer (Wednesday, 21 September)
• Re: Isolate-Me explainer (Wednesday, 21 September)
• Re: Isolate-Me explainer (Monday, 19 September)
• Isolate-Me explainer (Friday, 16 September)

Francois Marier

• Re: [SRI] require-sri-for: missing integrity metadata? same-origin loads? (Friday, 9 September)

Frederik Braun

• Re: [SRI] require-sri-for: missing integrity metadata? same-origin loads? (Monday, 12 September)
• Re: [SRI] reporting (Was: [SRI] require-sri-for syntax and additional SRI/CSP interaction (Friday, 9 September)
• [SRI] reporting (Was: [SRI] require-sri-for syntax and additional SRI/CSP interaction (Friday, 9 September)
• [SRI] require-sri-for syntax and additional SRI/CSP interaction (Friday, 9 September)
• [SRI] require-sri-for: missing integrity metadata? same-origin loads? (Friday, 9 September)
• Re: [webappsec] draft agenda for tomorrow's teleconference (Wednesday, 7 September)

Henrik Andersson

• [Css-images] Re: CSS fetch integration (Tuesday, 27 September)

Hodges, Jeff

• webappsec tpac 2016 session agenda (?) (Thursday, 22 September)
• Workshop on Web Application Security 2016 Stanford University, Sep. 9, 2016 (Thursday, 8 September)
• On the Insecurity of Whitelists and the Future of CSP (Wednesday, 7 September)

Jim Manico

• Re: On the Insecurity of Whitelists and the Future of CSP (Thursday, 8 September)

Joel Weinberger

• Re: Call on 9/21 (Monday, 19 September)
• Re: [suborigins] The origin relationship to suborigins (Tuesday, 6 September)

John Wilander

• Re: Restrict loopback address to Secure Contexts? (Monday, 26 September)
• Restrict loopback address to Secure Contexts? (Monday, 26 September)
• Re: Isolate-Me explainer (Monday, 19 September)
• Re: Isolate-Me explainer (Monday, 19 September)
• CORS-safelisted request headers should be restricted according to RFC 7231 (Wednesday, 7 September)

Jonathan Kingston

• CSS fetch integration (Tuesday, 27 September)

Joseph Lorenzo Hall

• Re: [blink-dev] Must have SSL or dedicated IP address? (Monday, 19 September)

Kate McKinley

• HSTS Priming (Thursday, 22 September)

Krzysztof Kotowicz

• Re: Isolate-Me explainer (Wednesday, 21 September)

Martin Thomson

• Re: Quoted Referrer-Policy values (Friday, 9 September)

Melvin Carvalho

• Re: `localhost` as Secure Context, take 2 (was Re: CfC: Transition "Secure Contexts" to CR; deadline August 2nd.) (Wednesday, 28 September)

Mike West

• Re: `localhost` as Secure Context, take 2 (was Re: CfC: Transition "Secure Contexts" to CR; deadline August 2nd.) (Thursday, 29 September)
• Re: `localhost` as Secure Context, take 2 (was Re: CfC: Transition "Secure Contexts" to CR; deadline August 2nd.) (Thursday, 29 September)
• `localhost` as Secure Context, take 2 (was Re: CfC: Transition "Secure Contexts" to CR; deadline August 2nd.) (Wednesday, 28 September)
• Re: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• Re: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• Re: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• Re: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• Re: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• Re: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• Re: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)
• Re: HSTS Priming (Monday, 26 September)
• Re: Restrict loopback address to Secure Contexts? (Monday, 26 September)
• Re: Isolate-Me explainer (Wednesday, 21 September)
• Re: 'strict-dynamic' syntax (was Re: On the Insecurity of Whitelists and the Future of CSP) (Tuesday, 13 September)
• Re: CSP: Embedded Enforcement (Monday, 12 September)
• Re: [SRI] reporting (Was: [SRI] require-sri-for syntax and additional SRI/CSP interaction (Friday, 9 September)
• CSP: Embedded Enforcement (Friday, 9 September)
• Re: [SRI] require-sri-for: missing integrity metadata? same-origin loads? (Friday, 9 September)
• Re: [SRI] require-sri-for syntax and additional SRI/CSP interaction (Friday, 9 September)
• Re: 'strict-dynamic' syntax (was Re: On the Insecurity of Whitelists and the Future of CSP) (Friday, 9 September)
• 'strict-dynamic' syntax (was Re: On the Insecurity of Whitelists and the Future of CSP) (Thursday, 8 September)
• Re: On the Insecurity of Whitelists and the Future of CSP (Thursday, 8 September)
• Re: Quoted Referrer-Policy values (Wednesday, 7 September)
• Re: Quoted Referrer-Policy values (Wednesday, 7 September)

Mohan Sekar

• RE: Restrict loopback address to Secure Contexts? (Tuesday, 27 September)

Oda, Terri

• Re: On the Insecurity of Whitelists and the Future of CSP (Monday, 12 September)

Sergey Shekyan

• Re: Autoclave (Friday, 16 September)
• Re: [SRI] require-sri-for: missing integrity metadata? same-origin loads? (Monday, 12 September)

Tanvi Vyas

• Re: Isolate-Me explainer (Monday, 19 September)

Ted Guild

• Re: WebAppSec and Auto WG discussion during TPAC (Wednesday, 21 September)
• WebAppSec and Auto WG discussion during TPAC (Wednesday, 14 September)

Victor Costan

• Re: [blink-dev] Must have SSL or dedicated IP address? (Thursday, 15 September)

Xueyuan Jia

• Call for Exclusions: Secure Contexts (Friday, 16 September)

๏̯͡๏ Jasvir Nagra

• Re: Workshop on Web Application Security 2016 Stanford University, Sep. 9, 2016 (Wednesday, 21 September)

Last message date: Thursday, 29 September 2016 15:15:57 UTC