1 / 8

Agenda Tobias Gondrom November 2010

Agenda Tobias Gondrom November 2010. Websec WG IETF 79. Note Well. Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC and any statement made within the context

lefty
Download Presentation

Agenda Tobias Gondrom November 2010

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Agenda Tobias GondromNovember 2010 Websec WGIETF 79

  2. Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC and any statement made within the context of an IETF activity is considered an "IETF Contribution". Such statements include oral statements in IETF sessions, as well as written and electronic communications made at any time or place, which are addressed to: • the IETF plenary session, • any IETF working group or portion thereof, • the IESG or any member thereof on behalf of the IESG, • the IAB or any member thereof on behalf of the IAB, • any IETF mailing list, including the IETF list itself, • any working group or design team list, or any other list • functioning under IETF auspices, • the RFC Editor or the Internet-Drafts function All IETF Contributions are subject to the rules of RFC 3978 (updated by RFC 4748) and RFC 3979 (updated by RFC 4879). Statements made outside of an IETF session, mailing list or other function, that are clearly not intended to be input to an IETF activity, group or function, are not IETF Contributions in the context of this notice. Please consult RFC 3978 (and RFC 4748) for details. A participant in any IETF activity is deemed to accept all IETF rules of process, as documented in Best Current Practices RFCs and IESG Statements. A participant in any IETF activity acknowledges that written, audio and video records of meetings may be made and may be available to the public.

  3. AGENDA • Administrativia – 3mins • Note takers, Jabber Scribes, Blue sheets • WG Status, draft status - Tobias - 10 min • Sniffing, • Web Origin Concept • X-FRAME-OPTIONS • draft-hodges-strict-transport-sec - Jeff 10 min • DNSSEC for strict security - Paul 15 min • DNSSEC for strict security - Phillip (on behalf) 5 min • DNSSEC for strict security - Discussion 15 min • Requirements - Jeff - 15 min • open discussion: requirements and next steps - 30 min • other topics / open mike - 10 min

  4. Status of WG Drafts • Sniffing: draft-abarth-mime-sniff • will be submitted as WG I-D after black-out • Please take time to review • Inter-Dependencies with draft-masinter-web-info-01 ? • Web Origin Concept: draft-abarth-origin • will be submitted as WG I-D after black-out • Please take time to review

  5. Status of WG Drafts • X-FRAME-OPTIONS: TBD? • Running code and (some) consensus by implementers in using X-FRAME-OPTIONS • DENY: The page cannot be displayed in a frame, regardless of the site attempting to do so. • SAMEORIGIN: The page can only be displayed in a frame on the same origin as the page itself. • => make it “FRAME-OPTIONS”? • Do we need more than the two values?

  6. AGENDA • Administrativia – 3mins • Note takers, Jabber Scribes, Blue sheets • WG Status, draft status - Tobias - 10 min • Sniffing, • Web Origin Concept • X-FRAME-OPTIONS • draft-hodges-strict-transport-sec - Jeff 10 min • DNSSEC for strict security - Paul 15 min • DNSSEC for strict security - Phillip (on behalf) 5 min • DNSSEC for strict security - Discussion 15 min • Requirements - Jeff - 15 min • open discussion: requirements and next steps - 30 min • other topics / open mike - 10 min

  7. Other topics / open mike • Discuss, Comments, Questions, …

  8. Thank you

More Related