I've posted a draft Mixed Content specification to WebAppSec for review: https://w3c.github.io/webappsec/specs/mixedcontent/ … Suggestions and feedback are very welcome.
-
-
@BRIAN_____: I hadn't considered NFS, but think we have to trust the local machine's FS. Maybe "over the internet" is better? /cc@fugueishThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@BRIAN_____@mikewest or worse, UNC paths on windows that can name arbitrary hosts on the Internet. -
@dveditz@BRIAN_____: Clarified text and noted UNC concern in https://github.com/w3c/webappsec/commit/19f29134485494fe7e8be9280f62d47b93bccc3e ….
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.