websec

Messages by Date

2011/10/24 Re: [websec] font sniffing Tobias Gondrom
2011/10/24 Re: [websec] font sniffing Martin J. Dürst
2011/10/24 Re: [websec] Issue 17: Registry for magic numbers Adam Barth
2011/10/24 Re: [websec] Issue 17: Registry for magic numbers Tobias Gondrom
2011/10/24 Re: [websec] Issue 17: Registry for magic numbers Martin J. Dürst
2011/10/24 Re: [websec] font sniffing Anne van Kesteren
2011/10/24 Re: [websec] Issue 17: Registry for magic numbers Adam Barth
2011/10/24 Re: [websec] Issue 17: Registry for magic numbers Anne van Kesteren
2011/10/24 [websec] Issue 17: Registry for magic numbers Adam Barth
2011/10/24 Re: [websec] font sniffing Martin J. Dürst
2011/10/24 Re: [websec] font sniffing Martin J. Dürst
2011/10/24 Re: [websec] #21: sniffing of text/html shouldn't override polyglot label of application/xhtml+xml Adam Barth
2011/10/24 Re: [websec] #21: sniffing of text/html shouldn't override polyglot label of application/xhtml+xml Philip Gladstone
2011/10/24 Re: [websec] font sniffing Larry Masinter
2011/10/24 Re: [websec] #21: sniffing of text/html shouldn't override polyglot label of application/xhtml+xml Larry Masinter
2011/10/24 Re: [websec] #21: sniffing of text/html shouldn't override polyglot label of application/xhtml+xml Philip Gladstone
2011/10/24 Re: [websec] font sniffing Anne van Kesteren
2011/10/24 Re: [websec] font sniffing Tobias Gondrom
2011/10/24 Re: [websec] #22: content-type sniffing should include charset sniffing Anne van Kesteren
2011/10/24 Re: [websec] font sniffing Anne van Kesteren
2011/10/24 Re: [websec] font sniffing Tobias Gondrom
2011/10/24 Re: [websec] font sniffing Anne van Kesteren
2011/10/24 Re: [websec] #16: lack of explanatory text and no justifications for the normative language Tobias Gondrom
2011/10/24 Re: [websec] #19: Do not sniff PDF Julian Reschke
2011/10/24 Re: [websec] #19: Do not sniff PDF Tobias Gondrom
2011/10/24 Re: [websec] #22: content-type sniffing should include charset sniffing Tobias Gondrom
2011/10/23 Re: [websec] #22: content-type sniffing should include charset sniffing Larry Masinter
2011/10/23 Re: [websec] #22: content-type sniffing should include charset sniffing Martin J. Dürst
2011/10/23 [websec] MIME sniffing test suite? Is there one? Larry Masinter
2011/10/23 Re: [websec] #22: content-type sniffing should include charset sniffing Adam Barth
2011/10/23 Re: [websec] #22: content-type sniffing should include charset sniffing Larry Masinter
2011/10/23 Re: [websec] #22: content-type sniffing should include charset sniffing Adam Barth
2011/10/23 Re: [websec] #22: content-type sniffing should include charset sniffing Larry Masinter
2011/10/23 Re: [websec] #22: content-type sniffing should include charset sniffing Adam Barth
2011/10/23 Re: [websec] #22: content-type sniffing should include charset sniffing Larry Masinter
2011/10/23 Re: [websec] #20: Sniffing should be "opt in" on a case-by-case basis Adam Barth
2011/10/23 Re: [websec] #22: content-type sniffing should include charset sniffing Adam Barth
2011/10/23 Re: [websec] #20: Sniffing should be "opt in" on a case-by-case basis Larry Masinter
2011/10/23 Re: [websec] #19: Do not sniff PDF Adam Barth
2011/10/23 Re: [websec] #22: content-type sniffing should include charset sniffing Tobias Gondrom
2011/10/23 Re: [websec] font sniffing - Re: Are all the issues filed? (was: Re: Using IETF Tracker for issues on MIME sniffing?) Adam Barth
2011/10/23 Re: [websec] #19: Do not sniff PDF Larry Masinter
2011/10/23 [websec] font sniffing - Re: Are all the issues filed? (was: Re: Using IETF Tracker for issues on MIME sniffing?) Tobias Gondrom
2011/10/23 Re: [websec] #20: Sniffing should be "opt in" on a case-by-case basis Tobias Gondrom
2011/10/23 Re: [websec] #19: Do not sniff PDF Tobias Gondrom
2011/10/23 Re: [websec] Are all the issues filed? (was: Re: Using IETF Tracker for issues on MIME sniffing?) Larry Masinter
2011/10/23 [websec] #24: ensure XML packaging is in scope websec issue tracker
2011/10/23 [websec] #23: spec should mention proposed "nosniff" headers in HTTP even if not adopting them websec issue tracker
2011/10/23 [websec] #22: content-type sniffing should include charset sniffing websec issue tracker
2011/10/23 [websec] #21: sniffing of text/html shouldn't override polyglot label of application/xhtml+xml websec issue tracker
2011/10/23 [websec] #20: Sniffing should be "opt in" on a case-by-case basis websec issue tracker
2011/10/23 [websec] #19: Do not sniff PDF websec issue tracker
2011/10/23 [websec] #18: Describe use of file extension in sniffing from "file:" and "ftp:" URIs websec issue tracker
2011/10/23 [websec] #17: Use the "magic numbers" in the media type IANA registry instead of an explicit table websec issue tracker
2011/10/22 [websec] Are all the issues filed? (was: Re: Using IETF Tracker for issues on MIME sniffing?) Adam Barth
2011/10/22 Re: [websec] #16: lack of explanatory text and no justifications for the normative language websec issue tracker
2011/10/22 Re: [websec] #15: Clarify scope of MIME sniffing websec issue tracker
2011/10/21 Re: [websec] Review of draft-evans-palmer-hsts-pinning-00 Chris Palmer
2011/10/19 [websec] #16: lack of explanatory text and no justifications for the normative language websec issue tracker
2011/10/19 Re: [websec] #15: Clarify scope of web sniffing Tobias Gondrom
2011/10/18 Re: [websec] Using IETF Tracker for issues on MIME sniffing? Tobias Gondrom
2011/10/17 Re: [websec] wrt "breaking pins" aka "un-pinning" (breakv, breakc directives; draft-evans-palmer-hsts-pinning-00) Phillip Hallam-Baker
2011/10/17 Re: [websec] wrt "breaking pins" aka "un-pinning" (breakv, breakc directives; draft-evans-palmer-hsts-pinning-00) Marsh Ray
2011/10/17 Re: [websec] wrt "breaking pins" aka "un-pinning" (breakv, breakc directives; draft-evans-palmer-hsts-pinning-00) Chris Palmer
2011/10/17 Re: [websec] wrt "breaking pins" aka "un-pinning" (breakv, breakc directives; draft-evans-palmer-hsts-pinning-00) =JeffH
2011/10/17 Re: [websec] separate pinning header (was: Pinning and beyond...) Chris Palmer
2011/10/17 Re: [websec] #15: Clarify scope of MIME sniffing (was: Clarify scope of web sniffing) websec issue tracker
2011/10/17 [websec] #15: Clarify scope of web sniffing websec issue tracker
2011/10/17 Re: [websec] wrt "breaking pins" aka "un-pinning" (breakv, breakc directives; draft-evans-palmer-hsts-pinning-00) Chris Palmer
2011/10/17 Re: [websec] Using IETF Tracker for issues on MIME sniffing? Peter Saint-Andre
2011/10/17 [websec] websec meeting in Taipei Tobias Gondrom
2011/10/16 Re: [websec] wrt "breaking pins" aka "un-pinning" (breakv, breakc directives; draft-evans-palmer-hsts-pinning-00) Trevor Perrin
2011/10/15 Re: [websec] separate pinning header (was: Pinning and beyond...) Phillip Hallam-Baker
2011/10/15 Re: [websec] Using IETF Tracker for issues on MIME sniffing? Adam Barth
2011/10/15 [websec] Using IETF Tracker for issues on MIME sniffing? Larry Masinter
2011/10/14 Re: [websec] Review of draft-evans-palmer-hsts-pinning-00 Tom Ritter
2011/10/14 Re: [websec] separate pinning header (was: Pinning and beyond...) Tom Ritter
2011/10/14 [websec] separate pinning header (was: Pinning and beyond...) =JeffH
2011/10/14 [websec] wrt "breaking pins" aka "un-pinning" (breakv, breakc directives; draft-evans-palmer-hsts-pinning-00) =JeffH
2011/10/14 [websec] Review of draft-evans-palmer-hsts-pinning-00 =JeffH
2011/10/08 Re: [websec] Strict-Transport-Security syntax redux Julian Reschke
2011/10/08 Re: [websec] Strict-Transport-Security syntax redux Julian Reschke
2011/10/07 Re: [websec] [decade] Digest: Adventures in encoding Phillip Hallam-Baker
2011/10/07 Re: [websec] [decade] Digest: Adventures in encoding Giorgio Maone
2011/10/07 Re: [websec] [decade] Digest: Adventures in encoding Julian Reschke
2011/10/07 Re: [websec] [decade] Digest: Adventures in encoding Phillip Hallam-Baker
2011/10/07 Re: [websec] [decade] Digest: Adventures in encoding Stephen Farrell
2011/10/07 Re: [websec] [decade] Digest: Adventures in encoding Phillip Hallam-Baker
2011/10/07 Re: [websec] [decade] Digest: Adventures in encoding Phillip Hallam-Baker
2011/10/07 Re: [websec] [decade] Digest: Adventures in encoding Stephen Farrell
2011/10/07 Re: [websec] [decade] Digest: Adventures in encoding Martin J. Dürst
2011/10/07 Re: [websec] [decade] Digest: Adventures in encoding Stephen Farrell
2011/10/06 [websec] Digest: Adventures in encoding Phillip Hallam-Baker
2011/10/06 Re: [websec] Strict-Transport-Security syntax redux =JeffH
2011/10/05 [websec] Protocol Action: 'The Web Origin Concept' to Proposed Standard (draft-ietf-websec-origin-06.txt) The IESG
2011/10/05 Re: [websec] [decade] Updated, updated DIGEST spec Phillip Hallam-Baker
2011/10/05 Re: [websec] I-D Action: draft-ietf-websec-origin-05.txt Julian Reschke
2011/10/05 Re: [websec] [decade] Updated, updated DIGEST spec Rahman, Akbar
2011/10/04 Re: [websec] Updated, updated DIGEST spec Phillip Hallam-Baker
2011/10/04 [websec] Updated, updated DIGEST spec Phillip Hallam-Baker
2011/10/04 Re: [websec] Digest URI scheme Phillip Hallam-Baker
2011/10/04 Re: [websec] Digest Scheme URI: .well-known Phillip Hallam-Baker
2011/10/04 Re: [websec] Updated Digest Scheme URI: truncated digests Phillip Hallam-Baker
2011/10/04 Re: [websec] Digest URI scheme Julian Reschke
2011/10/03 Re: [websec] Updated Digest Scheme URI: truncated digests Thomson, Martin
2011/10/03 Re: [websec] Digest Scheme URI: .well-known Thomson, Martin
2011/10/03 Re: [websec] Updated Digest Scheme URI: truncated digests Manger, James H
2011/10/03 Re: [websec] Digest Scheme URI: .well-known Manger, James H
2011/10/03 Re: [websec] Digest Scheme URI: .well-known Phillip Hallam-Baker
2011/10/03 [websec] Digest Scheme URI: .well-known Thomson, Martin
2011/10/03 Re: [websec] Digest URI scheme Phillip Hallam-Baker
2011/10/03 Re: [websec] Digest URI scheme Martin J. Dürst
2011/10/03 Re: [websec] Digest URI scheme Martin J. Dürst
2011/10/03 Re: [websec] Digest URI scheme Phillip Hallam-Baker
2011/10/03 Re: [websec] Digest URI scheme Bjoern Hoehrmann
2011/10/03 Re: [websec] Digest URI scheme Phillip Hallam-Baker
2011/10/03 Re: [websec] Digest URI scheme Bjoern Hoehrmann
2011/10/03 [websec] Updated Digest Scheme URI Phillip Hallam-Baker
2011/10/03 Re: [websec] Digest URI scheme Bjoern Hoehrmann
2011/10/03 Re: [websec] Digest URI scheme Phillip Hallam-Baker
2011/10/03 Re: [websec] Digest URI scheme Bjoern Hoehrmann
2011/10/03 Re: [websec] Digest URI scheme Phillip Hallam-Baker
2011/10/03 Re: [websec] Digest URI scheme Paul Hoffman
2011/10/03 Re: [websec] Digest URI scheme Phillip Hallam-Baker
2011/10/03 Re: [websec] Digest URI scheme Paul Hoffman
2011/10/03 Re: [websec] Digest URI scheme Phillip Hallam-Baker
2011/10/03 Re: [websec] Digest URI scheme Paul Hoffman
2011/10/03 Re: [websec] Digest URI scheme Phillip Hallam-Baker
2011/10/03 Re: [websec] Digest URI scheme Phillip Hallam-Baker
2011/10/03 Re: [websec] Digest URI scheme Julian Reschke
2011/10/03 Re: [websec] I-D Action: draft-ietf-websec-origin-05.txt Julian Reschke
2011/10/03 Re: [websec] Digest URI scheme Martin J. Dürst
2011/10/03 [websec] I-D Action: draft-ietf-websec-origin-06.txt internet-drafts
2011/10/03 Re: [websec] Digest URI scheme Martin J. Dürst
2011/10/02 Re: [websec] I-D Action: draft-ietf-websec-origin-05.txt Adam Barth
2011/10/02 Re: [websec] I-D Action: draft-ietf-websec-origin-05.txt Martin J. Dürst
2011/10/02 Re: [websec] Digest URI scheme Tobias Gondrom
2011/10/02 Re: [websec] I-D Action: draft-ietf-websec-origin-05.txt Adam Barth
2011/10/02 Re: [websec] I-D Action:draft-ietf-websec-mime-sniff-03.txt Bjoern Hoehrmann
2011/10/02 Re: [websec] I-D Action:draft-ietf-websec-mime-sniff-03.txt Tobias Gondrom
2011/10/02 [websec] Strict-Transport-Security syntax redux Ryan Sleevi
2011/10/01 Re: [websec] I-D Action:draft-ietf-websec-mime-sniff-03.txt Phillip Hallam-Baker
2011/09/30 Re: [websec] I-D Action:draft-ietf-websec-mime-sniff-03.txt Adam Barth
2011/09/30 Re: [websec] I-D Action:draft-ietf-websec-mime-sniff-03.txt Martin J. Dürst
2011/09/30 [websec] fyi: IDN processing-related security considerations for draft-ietf-websec-strict-transport-sec =JeffH
2011/09/30 Re: [websec] Digest URI scheme stephen . farrell
2011/09/29 Re: [websec] Digest URI scheme Phillip Hallam-Baker
2011/09/29 Re: [websec] Digest URI scheme stephen . farrell
2011/09/29 Re: [websec] Digest URI scheme Tobias Gondrom
2011/09/29 Re: [websec] Digest URI scheme Paul Hoffman
2011/09/29 [websec] Content type (was: Re: Digest URI scheme) Paul Hoffman
2011/09/29 Re: [websec] Digest URI scheme Phillip Hallam-Baker
2011/09/29 Re: [websec] Digest URI scheme Phillip Hallam-Baker
2011/09/29 Re: [websec] Digest URI scheme Phillip Hallam-Baker
2011/09/28 Re: [websec] I-D Action:draft-ietf-websec-mime-sniff-03.txt Adam Barth
2011/09/28 Re: [websec] I-D Action:draft-ietf-websec-mime-sniff-03.txt Martin J. Dürst
2011/09/28 Re: [websec] I-D Action:draft-ietf-websec-mime-sniff-03.txt Adam Barth
2011/09/28 Re: [websec] I-D Action:draft-ietf-websec-mime-sniff-03.txt Tobias Gondrom
2011/09/28 Re: [websec] websec meeting in Taipei - topics? Tobias Gondrom
2011/09/28 Re: [websec] I-D Action:draft-ietf-websec-mime-sniff-03.txt Adam Barth
2011/09/28 Re: [websec] I-D Action:draft-ietf-websec-mime-sniff-03.txt Tobias Gondrom
2011/09/28 Re: [websec] Pinning and beyond Was: Next rev of HSTS certificate pinning draft Tobias Gondrom
2011/09/28 Re: [websec] Digest URI scheme Tobias Gondrom
2011/09/28 Re: [websec] Digest URI scheme Martin J. Dürst
2011/09/28 Re: [websec] Digest URI scheme Gervase Markham
2011/09/27 Re: [websec] Strict-Transport-Security syntax Julian Reschke
2011/09/27 Re: [websec] Digest URI scheme Bjoern Hoehrmann
2011/09/27 Re: [websec] Digest URI scheme Bjoern Hoehrmann
2011/09/27 Re: [websec] Digest URI scheme Manger, James H
2011/09/27 Re: [websec] Digest URI scheme Paul Hoffman
2011/09/27 Re: [websec] Strict-Transport-Security syntax =JeffH
2011/09/27 Re: [websec] Strict-Transport-Security syntax Phillip Hallam-Baker
2011/09/27 [websec] Digest URI scheme Phillip Hallam-Baker
2011/09/25 Re: [websec] Strict-Transport-Security syntax Julian Reschke
2011/09/24 Re: [websec] I-D Action:draft-ietf-websec-mime-sniff-03.txt Alexey Melnikov
2011/09/24 Re: [websec] I-D Action:draft-ietf-websec-mime-sniff-03.txt Julian Reschke
2011/09/23 Re: [websec] AD review of -strict-transport-sec-02 (was: Strict-Transport-Security syntax and effective request URI def) =JeffH
2011/09/23 Re: [websec] I-D Action: draft-ietf-websec-origin-05.txt Julian Reschke
2011/09/22 [websec] I-D Action: draft-ietf-websec-origin-05.txt internet-drafts
2011/09/22 [websec] HSTS certificate pinning draft is now in the tracker Chris Palmer
2011/09/22 Re: [websec] Pinning and beyond Was: Next rev of HSTS certificate pinning draft Phillip Hallam-Baker
2011/09/22 Re: [websec] Pinning and beyond Was: Next rev of HSTS certificate pinning draft Paul Hoffman
2011/09/22 Re: [websec] Pinning and beyond Was: Next rev of HSTS certificate pinning draft Gervase Markham
2011/09/21 Re: [websec] Next rev of HSTS certificate pinning draft SM
2011/09/21 [websec] Pinning and beyond Was: Next rev of HSTS certificate pinning draft Phillip Hallam-Baker
2011/09/20 Re: [websec] Next rev of HSTS certificate pinning draft Yoav Nir
2011/09/20 Re: [websec] Next rev of HSTS certificate pinning draft Chris Palmer
2011/09/20 Re: [websec] Next rev of HSTS certificate pinning draft Chris Palmer
2011/09/20 Re: [websec] Next rev of HSTS certificate pinning draft Chris Palmer
2011/09/20 Re: [websec] Next rev of HSTS certificate pinning draft Phillip Hallam-Baker
2011/09/20 Re: [websec] Next rev of HSTS certificate pinning draft SM
2011/09/20 Re: [websec] Next rev of HSTS certificate pinning draft Yoav Nir
2011/09/19 [websec] fyi: host-meta approved as RFC =JeffH
2011/09/14 [websec] #14: Effective Request URI definition issues websec issue tracker
2011/09/14 Re: [websec] Strict-Transport-Security syntax =JeffH
2011/09/14 Re: [websec] effective request URI def, was: I-D Action: draft-ietf-websec-strict-transport-sec-02.txt =JeffH
2011/09/14 Re: [websec] websec meeting in Taipei - topics? Phillip Hallam-Baker
2011/09/14 Re: [websec] Certificate Pinning via HSTS Phillip Hallam-Baker
2011/09/14 Re: [websec] Certificate Pinning via HSTS Daniel Kahn Gillmor
2011/09/14 Re: [websec] Certificate Pinning via HSTS Phillip Hallam-Baker