canmove, Confirmed users
1,537
edits
Security/Features: Difference between revisions
no edit summary
No edit summary |
|||
| Line 11: | Line 11: | ||
| '''Implementation''' | | '''Implementation''' | ||
|- | |- | ||
| | | Origin | ||
| Done | | Done | ||
| Done | | Done | ||
| Line 20: | Line 20: | ||
| CSP | | CSP | ||
| Done (2/2009) | | Done (2/2009) | ||
| | | Pretty Much Done (9/2009) | ||
| | | | ||
| Done (8/2008) | | Done (8/2008) | ||
| | | Beta (9/2009) | ||
|- | |- | ||
| ForceTLS | | ForceTLS | ||
| Line 51: | Line 51: | ||
* {{done|Write up an informal spec}} [[Security/Origin]] | * {{done|Write up an informal spec}} [[Security/Origin]] | ||
* {{done|Unify spec with Adam Barth's Internet Draft}} [http://webblaze.cs.berkeley.edu/2009/origin/origin.txt]. | * {{done|Unify spec with Adam Barth's Internet Draft}} [http://webblaze.cs.berkeley.edu/2009/origin/origin.txt]. | ||
* {{ | * {{done|Unify with CORS "Origin" or pick a new header name to avoid incompatibility.}} <strike>Reworked as [[Security/Sec-From]].</strike> | ||
Such an "Origin" header is also mentioned in HTML 5 [http://www.w3.org/TR/cors/#origin-header]. | Such an "Origin" header is also mentioned in HTML 5 [http://www.w3.org/TR/cors/#origin-header]. | ||
| Line 76: | Line 76: | ||
Tasks: | Tasks: | ||
* {{ | * {{done|Find appropriate standards body to review this feature}} (IETF). | ||
* {{ | * {{done|Submit to standards body.}} (Adam is leading this) | ||
| Line 150: | Line 150: | ||
* {{ok|create document explaining how to write a good policy}} | * {{ok|create document explaining how to write a good policy}} | ||
* {{ok|create document explaining how to convert a site to support CSP}} | * {{ok|create document explaining how to convert a site to support CSP}} | ||
* {{ | * {{done|create server-based test suite (for other UAs who implement CSP)}} | ||
== ForceTLS == | == ForceTLS / Strict-Transport-Security == | ||
'''Design''': Done (6/18/2009) | '''Design''': Done (6/18/2009) | ||
| Line 179: | Line 179: | ||
Tasks: | Tasks: | ||
* {{ok|IETF?}} | * {{ok|IETF?}} | ||
* {{ok|W3C?}} (Currently submitted here by Paypal) | |||
'''Prototype''': Done. (6/2009) | '''Prototype''': Done. (6/2009) | ||