ACTION-380: Text for ISSUE-131

It seemed that we had agreement on this text for ISSUE-131:

	Web user agents MUST inform the user and request consent
	when web content attempts to install software outside of the
	browser environment, using browser mechanisms and technology
	that are explicitly provided for such installations. Web
	user agents SHOULD NOT provide features which can be used by
	web content to install software outside of the browser
	environment without the user's consent. Web user agents MAY
	provide mechanisms for users to pre-consent to a class of
	software installations. Web user agents SHOULD inform the
	user when web content is installing software outside of the
	browser environment that is covered by a pre-consent.

	Web user agents MAY inform the user when web content
	attempts to execute software outside of the agent
	environment, and MAY also request user consent, but SHOULD
	NOT do so unconditionally for all types of content or
	software.  If the agent chooses to do this then it SHOULD do
	itfor specific content types, software types, or security
	context based on risk.

See:
  http://lists.w3.org/Archives/Public/public-wsc-wg/2007Dec/0116.html

I've added these changes to the editor's draft, and suggest closing
ISSUE-131.

-- 
Thomas Roessler, W3C  <tlr@w3.org>

Received on Thursday, 31 January 2008 00:39:48 UTC