Re: CORS/UMP to become joint WebApps and WebAppSec joint deliverable

2011-08-03 Thread Thomas Roessler
On Aug 3, 2011, at 07:48 , Maciej Stachowiak wrote: > At Apple we have a somewhat lengthy internal process for joining new Working > Groups, so if feedback has to go to a new WG's list, you will likely miss out > on Apple feedback for at least a few months. Is the hold-up over "feedback has to

Re: CORS/UMP to become joint WebApps and WebAppSec joint deliverable

2011-08-03 Thread Thomas Roessler
On Aug 3, 2011, at 10:21 , Anne van Kesteren wrote: > On Tue, 02 Aug 2011 14:37:31 +0200, Arthur Barstow > wrote: >> The From-Origin spec is WebApps'; it is _not_ a joint deliverable with the >> proposed WebAppSec WG. > > I assumed it was because of "Secure Cross-Domain Framing" and the signif

Re: CORS/UMP to become joint WebApps and WebAppSec joint deliverable

2011-08-03 Thread Anne van Kesteren
On Tue, 02 Aug 2011 14:37:31 +0200, Arthur Barstow wrote: The From-Origin spec is WebApps'; it is _not_ a joint deliverable with the proposed WebAppSec WG. I assumed it was because of "Secure Cross-Domain Framing" and the significant overlap. I discussed this with Thomas on IRC (not log

Re: CORS/UMP to become joint WebApps and WebAppSec joint deliverable

2011-08-02 Thread Maciej Stachowiak
On Aug 2, 2011, at 4:10 AM, Anne van Kesteren wrote: > On Tue, 02 Aug 2011 12:53:49 +0200, Thomas Roessler wrote: >> Well, groups can decide to stop working on a deliverable without having to >> recharter; further, we've had separate groups work on joint deliverables in >> the past. In practi

Re: CORS/UMP to become joint WebApps and WebAppSec joint deliverable

2011-08-02 Thread Arthur Barstow
On 8/2/11 8:20 AM, ext Anne van Kesteren wrote: On Tue, 02 Aug 2011 13:10:25 +0200, Anne van Kesteren wrote: Can we at least make it so that public-webapps@w3.org stays the list for technical discussion on CORS? We already switched mailing lists once (twice if you count going from the initial

Re: CORS/UMP to become joint WebApps and WebAppSec joint deliverable

2011-08-02 Thread Anne van Kesteren
On Tue, 02 Aug 2011 13:10:25 +0200, Anne van Kesteren wrote: Can we at least make it so that public-webapps@w3.org stays the list for technical discussion on CORS? We already switched mailing lists once (twice if you count going from the initial proposal on public-web...@w3.org to public-a

Re: CORS/UMP to become joint WebApps and WebAppSec joint deliverable

2011-08-02 Thread Anne van Kesteren
On Tue, 02 Aug 2011 12:53:49 +0200, Thomas Roessler wrote: Well, groups can decide to stop working on a deliverable without having to recharter; further, we've had separate groups work on joint deliverables in the past. In practical terms, the minimum that webapps needs to do is to give it

Re: CORS/UMP to become joint WebApps and WebAppSec joint deliverable

2011-08-02 Thread Thomas Roessler
On Aug 1, 2011, at 20:05 , Maciej Stachowiak wrote: > On Jul 15, 2011, at 7:51 AM, Thomas Roessler wrote: >>> Joint deliverable seems even worse than moving it. >> >> The goal of making this a joint deliverable is to preserve the patent >> commitments out of webapps. This was a concern that cam

Re: CORS/UMP to become joint WebApps and WebAppSec joint deliverable

2011-08-01 Thread Maciej Stachowiak
On Jul 15, 2011, at 7:51 AM, Thomas Roessler wrote: > On Jul 15, 2011, at 16:47 , Anne van Kesteren wrote: > >> On Fri, 15 Jul 2011 14:43:13 +0200, Arthur Barstow >> wrote: >>> As indicated a year ago [1] and again at the end of last month [2], the >>> proposal to create a new Web Application

Re: CORS/UMP to become joint WebApps and WebAppSec joint deliverable

2011-07-15 Thread Thomas Roessler
On Jul 15, 2011, at 16:47 , Anne van Kesteren wrote: > On Fri, 15 Jul 2011 14:43:13 +0200, Arthur Barstow > wrote: >> As indicated a year ago [1] and again at the end of last month [2], the >> proposal to create a new Web Application Security WG has moved forward with >> a formal AC review now

Re: CORS/UMP to become joint WebApps and WebAppSec joint deliverable

2011-07-15 Thread Anne van Kesteren
On Fri, 15 Jul 2011 14:43:13 +0200, Arthur Barstow wrote: As indicated a year ago [1] and again at the end of last month [2], the proposal to create a new Web Application Security WG has moved forward with a formal AC review now underway and ending August 19. The proposed charter includes

CORS/UMP to become joint WebApps and WebAppSec joint deliverable

2011-07-15 Thread Arthur Barstow
As indicated a year ago [1] and again at the end of last month [2], the proposal to create a new Web Application Security WG has moved forward with a formal AC review now underway and ending August 19. The proposed charter includes making CORS and UMP a joint deliverable between the WebApps an