Re: Intent to implement: Sub-resource Integrity (SRI)

2015-01-01 Thread James Graham
On 01/01/15 01:38, Francois Marier wrote: > On 31/12/14 21:42, Ms2ger wrote: >> What's the testing story? Do we pass the web-platform tests >> ()? > > We do, except for one which relies on ambiguity in the spec and is > c

Re: Intent to implement: Sub-resource Integrity (SRI)

2014-12-31 Thread Francois Marier
On 31/12/14 21:42, Ms2ger wrote: > What's the testing story? Do we pass the web-platform tests > ()? We do, except for one which relies on ambiguity in the spec and is currently being discussed [1] in the working group. I

Re: Intent to implement: Sub-resource Integrity (SRI)

2014-12-31 Thread Francois Marier
On 31/12/14 19:09, L. David Baron wrote: >> Spec: http://www.w3.org/TR/SRI/ > > The TR draft of that spec looks a bit out-of-date. Will you be > referring to the editor's draft, and tracking the progress in the > working group, or be in touch with others who are? Yes, I'm working off of the edit

Re: Intent to implement: Sub-resource Integrity (SRI)

2014-12-31 Thread Francois Marier
On 31/12/14 19:00, Johnny Stenback wrote: > LGTM, what's the status wrt other browsers supporting this? Chromium has implemented the same subset of the spec as us (which is roughly what Level 1 is shaping up to be). It has already landed in Canary, not sure when they plan on pushing it to the rele

Re: Intent to implement: Sub-resource Integrity (SRI)

2014-12-31 Thread Ms2ger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/31/2014 06:40 AM, Francois Marier wrote: > Summary: Allow web authors to add integrity checks to > sub-resources. > > Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=992096 > > Spec: http://www.w3.org/TR/SRI/ What's the testing story? Do we

Re: Intent to implement: Sub-resource Integrity (SRI)

2014-12-30 Thread L. David Baron
On Wednesday 2014-12-31 18:40 +1300, Francois Marier wrote: > Summary: Allow web authors to add integrity checks to sub-resources. > > Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=992096 > > Spec: http://www.w3.org/TR/SRI/ The TR draft of that spec looks a bit out-of-date. Will you be refe

Re: Intent to implement: Sub-resource Integrity (SRI)

2014-12-30 Thread Johnny Stenback
LGTM, what's the status wrt other browsers supporting this? Thanks, Johnny On Tue, Dec 30, 2014 at 9:40 PM, Francois Marier wrote: > Summary: Allow web authors to add integrity checks to sub-resources. > > Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=992096 > > Spec: http://www.w3.org/TR/SR

Intent to implement: Sub-resource Integrity (SRI)

2014-12-30 Thread Francois Marier
Summary: Allow web authors to add integrity checks to sub-resources. Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=992096 Spec: http://www.w3.org/TR/SRI/ Platforms: all Estimated or target release: Q1 of 2015 Preference behind which this will be implemented: security.subResourceIntegrity.e