Subject: [websec] Fwd: [saag] WebSec status

From: Yoav Nir <[email-masked]>
Date: Thu, 2 Aug 2012 21:40:27 +0300

Sorry. forgot to CC this list.

Begin forwarded message:

From: Yoav Nir <[email-masked]<mailto:[email-masked]>>
Subject: [saag] WebSec status
Date: August 2, 2012 9:15:07 AM PDT
To: "[email-masked]<mailto:[email-masked]>" <[email-masked]<mailto:[email-masked]>>

WebSec met at 9:00 AM on Tuesday morning.

HSTS is at IETF LC. All issues are resolved, and a new revision should go to the IESG soon.
Cert Pinning is coming along, with several issues to be discussed on the list
Still no editor for Mime-sniffing. If none is found soon, we may consider dropping this item, but there are issues with HTML5 spec referencing it.
The Frame-Options drafts (X- and non-X-) are coming along OK, but the non-X may become part of CSP and move to W3C

Yoav