Re: Reading on security & the Web from Jonathan Rees on 2011-02-05 (www-tag@w3.org from February 2011)

From: Jonathan Rees <jar@creativecommons.org>
Date: Sat, 5 Feb 2011 09:35:47 -0500
To: John Kemp <john@jkemp.net>
Cc: www-tag@w3.org
Message-ID: <AANLkTin_DzES0P7HotWaBFkWxmisRwTkJC3G=ZnL7re8@mail.gmail.com>

Reminder to both of us of two topics:
  - certain webarch-y things that are hard in current architecture,
e.g. bookmarking places inside a session, or moving a secure session
from one client to another
  - vulnerabilities introduced by showing URIs uncritically to the
user (location bar, hover-over-link)  (relates to 302, DNSsec,
phishing, IRI)

to maybe consider at meeting if time, else for someone to write about
for a later version of your document.

Best
Jonathan

On Fri, Feb 4, 2011 at 2:02 PM, John Kemp <john@jkemp.net> wrote:
> Hello,
>
> I've written up an introduction to security related to Web architecture at http://www.w3.org/2001/tag/2011/02/security-web.html
>
> I intend to discuss this at our upcoming meeting in the session on security.
>
> Regards,
>
> - John
>
> ACTION-417, Tracker
>
>
>
>
>
>

Received on Saturday, 5 February 2011 14:36:20 UTC