I finally have some bandwidth for actively contributing to the
anti-clickjacking proposal. As I mentioned during a previous call, my employer
(Adobe Systems, Inc.) has given me permission to contribute what Adobe has
learned in addressing clickjacking threats with Flash Player. I was originally
considering creating a separate web page with information from Adobe's internal
docs. However, it might be better for me to spend my time either flushing out
an existing document or creating a W3C specific document. The Adobe information
could be integrated directly into one of those documents to ensure all of our
knowledge is consolidated.
Currently, we have the original Requirements document and the proposal
that Brad Hill and Scott Stender put together. I could continue adding content
to either of those two documents or I could put together a rough template for
something more formal. Since I now have the time and motivation, where would be
the best place for me to focus my efforts?
Thanks,
-Peleus
--
Peleus Uhley
Platform Security Strategist
Adobe Systems, Inc.