- From: Mary Ellen Zurko <Mary_Ellen_Zurko@notesdev.ibm.com>
- Date: Thu, 19 Apr 2007 15:56:09 -0400
- To: Web Security Context WG <public-wsc-wg@w3.org>
- Message-ID: <OF21E46A8C.CD149666-ON852572C2.006D6381-852572C2.006D82E8@LocalDomain>
I think we're good with this. I looked at our goals again to see if
there's some better way to make clear that our recommendations will cover
both the abstract and the concrete (the abstract so it will translate to a
variety of user agents and contexts, and the concrete so it can be
tested). I didn't come up with anything to add. But it would be great if
anyone else did.
Mez
Mary Ellen Zurko, STSM, IBM Lotus CTO Office (t/l 333-6389)
Lotus/WPLC Security Strategy and Patent Innovation Architect
Web Security Context Issue Tracker <dean+cgi@w3.org>
Sent by: public-wsc-wg-request@w3.org
04/17/2007 08:23 AM
Please respond to
Web Security Context WG <public-wsc-wg@w3.org>
To
public-wsc-wg@w3.org
cc
Subject
ISSUE-58: simplicity is in the [diverse] world of the user (public
comment)
ISSUE-58: simplicity is in the [diverse] world of the user (public
comment)
http://www.w3.org/2006/WSC/Group/track/issues/58
Raised by: Bill Doyle
On product: Note: use cases etc.
>From public comments
raised by: Al Gilman Alfred.S.Gilman@ieee.org
http://lists.w3.org/Archives/Public/public-usable-
authentication/2007Apr/0000.html
simplicity is in the [diverse] world of the user
where it says, in 10.1.6 Aesthetic and minimalist design
Dialogues should not contain information which is irrelevant or
rarely needed. Every extra unit of information in a dialogue
competes with the relevant units of information and diminishes their
relative visibility
please consider
presentation effects that communicate subliminally are not subject to
quite
the same contention as is, say, the collection of objects in a popup.
True,
there can be too many of them. But for a finite number, they tend to play
nice together. Note also that best current practice uses combo boxes at
times
where the diversity of method afforded adds more than it subtracts.
please consider
same old -- layer the answer by model then view
The Working Group is competent to state what the user needs to understand,
and
what the user has available to help them understand (including all
available)
and should spell those out independent of presentation advice or
conventions.
Then, in a second layer, suggest what makes sense to present under stated
nominal conditions, and how.
Why?
Under adaptive conditions, there is no way for the experts in this group
to
a_priori know how much the security infoset should be filtered, or for
that
matter what constitutes a "friendly message" corresponding to a "403:
forbidden."
Received on Thursday, 19 April 2007 19:56:14 UTC