Issue 12 - future proofing User Agent Security - Multi-vendor and Collaborative environments

The level of security presented by the User Agent to the user must
protect user data through the entire data lifecycle. Pages rendered by
User Agents are increasingly components of multi-vendor processing
schemes and multi-protocol collaboration environments. If the User
Agent configures an HTTPs session to protect a user session, the user
has a level of expectation in regards to security and information
assurance. In the case of HTTPs the user expects that security goes
beyond the HTTPs session termination point and protects all use of the
data. For example if a user id / password is transmitted in an HTTPs
session the receiving server cannot forward this data in clear text. If
developers cannot secure user data throughout the data lifecycle, the
level of security presented to the user should be downgraded to the
lowest level of security provided.