w3c / webappsec

Web Application Security Working Group repo
https://www.w3.org/groups/wg/webappsec/
Other
605 stars 148 forks source link

CREDENTIAL: expanding public suffix scope #248

Open annevk opened 9 years ago

annevk commented 9 years ago

Did @sleevi et al agree with expanding the scope of public suffixes?

We should probably add some warnings around these algorithms so they are not picked up by other specifications if we really want to go down this route. And make it somewhat clearer public suffix is involved as does origin A match origin B does not make it really clear.

mikewest commented 9 years ago

I haven't talked with @sleevi about it, no. Happy to change things if they end up not making sense.