Subject: [websec] Review request for a few WebAppSec specs.

From: "Hill, Brad" <[email-masked]>
Date: Tue, 16 Sep 2014 21:09:05 +0000

BCC: public-webappsec@, FYI.
CC: <WebAppSec editors/chairs>

Hello IETF WebSec folks,

The WebAppSec WG over at the W3C has a few specifications in flight for which we're actively seeking feedback. One or more of them might be interesting to you; if you have some spare time, we'd very much appreciate your feedback:

CSP2: https://w3c.github.io/webappsec/specs/content-security-policy/
Mixed Content: https://w3c.github.io/webappsec/specs/mixedcontent/
Referrer Policy: https://w3c.github.io/webappsec/specs/referrer-policy/
Subresource Integrity: https://w3c.github.io/webappsec/specs/subresourceintegrity/

The first three are in pretty good shape both in terms of the spec text and implementations. The last (SRI) would be more of a pre-review, but would still be helpful for us.

Thanks!

Brad Hill