RE: ACTION-318: Draft a new subsection to section 7 discussing the mixing of trusted/untrusted information in the UI

could go under section 9 - problems with status quo
 
Secured and non-secured content is mixed 
 
 


________________________________

	From: public-wsc-wg-request@w3.org
[mailto:public-wsc-wg-request@w3.org] On Behalf Of Mary Ellen Zurko
	Sent: Wednesday, November 14, 2007 7:50 AM
	To: Doyle, Bill
	Cc: public-wsc-wg@w3.org
	Subject: RE: ACTION-318: Draft a new subsection to section 7
discussing the mixing of trusted/untrusted information in the UI
	
	

	I believe the referernce is to wsc-xit, not wsc-usecases. 
	
	
http://lists.w3.org/Archives/Member/member-wsc-wg/2007Oct/0011.html
<http://lists.w3.org/Archives/Member/member-wsc-wg/2007Oct/0011.html> 
	
	And I agree; section 7 doesn't look like the right place to me.
If it's about mixing trusted and untrusted info in certs; maybe
sections 4 or 8? Johnathan, Thomas, Tyler - you were all on the
discussion; any better recall? 
	
	          Mez
	
	Mary Ellen Zurko, STSM, IBM Lotus CTO Office       (t/l
333-6389)
	Lotus/WPLC Security Strategy and Patent Innovation Architect
	
	
	
	
From: 	"Doyle, Bill" <wdoyle@mitre.org> 
To: 	"Doyle, Bill" <wdoyle@mitre.org>, <public-wsc-wg@w3.org> 
Date: 	11/09/2007 03:48 PM 
Subject: 	RE: ACTION-381: Draft a new subsection to section 7
discussing the mixing of trusted/untrusted information in the UI

________________________________




	Seems like UI issues and mixing of trusted/untrusted
information should go under this heading
	 
	2.5 Reliable presentation of security information
<http://www.w3.org/TR/2007/WD-wsc-usecases-20071101/#trusted-path> 
	 
	 
	
	
________________________________

	From: public-wsc-wg-request@w3.org
[mailto:public-wsc-wg-request@w3.org
<mailto:public-wsc-wg-request@w3.org> ] On Behalf Of Doyle, Bill
	Sent: Friday, November 09, 2007 3:24 PM
	To: public-wsc-wg@w3.org
	Subject: ACTION-381: Draft a new subsection to section 7
discussing the mixing of trusted/untrusted information in the UI
	
	If I have this action right I am not sure if this belongs in
section 7 - The section is titled Security Information Available to the
User Agent
	 
	Furthermore, section 7 has a heading titled "defined by user
agent" and UI is defined by user agent.  Is the WG making a statement
that this particular UI decision should not be left up to browser
developer community?
	 
	I am thinking that section 7 is the inputs and UI is an output,
UI is the application or use of security information. Do we need a new
section?
	 
	Cheers
	Bill D.