W3C

Mobile Web Best Practices Working Group Teleconference

01 Sep 2009

Agenda

See also: IRC log

Attendees

Present
Kai_Dietrich, adam, jo, francois, EdC, jeffs, yeliz, SeanP
Regrets
tomhume, manrique, achuter
Chair
Jo
Scribe
Kai

Contents


Jo: Apologies for not not having everything ready on time

Mobile Web Application Best Practices (MWABP)

Adam: getting there

Jo: why don't you do the editorial stuff in the mean time

MWBP 1.5

Kai: I will process the updates and convert the document to a regular and consistent HTML document.

<PhilA2> Hello, that sounds like Kai

Jo: Do we need another editorial session?

Kai: not for the time being, let me clean it up, and let's discuss the result with the group.

CT Draft

jo: life is a bit crazy after the holiday. Francois, you have some actions to tidy up. Status?

francois: was waiting on the latest version to do it only once.

jo: I need to get back into it. Want to do it by Friday...

francois: there are two topics for discussion. 1) comment from Graham Klyne, from ITS, 2) the crossside scripting tests that Chaals provided

jo: Klyne's comments should be covered by the latest draft. Need to review that.
... we can't prove through tests that crosside scripting is not a problem

francois: I read an article recently mentioning that 80% of existing problems were based on crosside scripting attacks

jo: if we make these tests normative then we freeze them but we want people to think about it and be flexible

francois: we may just provide a few tests

jo: [getting Bruce uptodate]
... we are asking what are trying to say?

<EdC> My question is: what _exact_ properties are enforced if these tests pass successfully? At least, we should be able to state what level of security / safety is ensured by these tests (even if not 100% safety).

jo: might be useful for Chaals or Opera to formulate a concise statement

<jo> ACTION: bruce to follow up within Opera as to what exactly the XSS test scripts supplied by chaals guard against [recorded in http://www.w3.org/2009/09/01-bpwg-minutes.html#action01]

<trackbot> Created ACTION-1003 - Follow up within Opera as to what exactly the XSS test scripts supplied by chaals guard against [on Bruce Lawson - due 2009-09-08].

<brucel> groovy

Jo: We need to think about timelines for finishing documents
... we have 4 months. We need to hurry up.

<jeffs> suggest merging ACTION 910 and ACTION 924

Jo: any other business?

<jo> ACTION-910?

<trackbot> ACTION-910 -- Jeffrey Sonstein to get review canvas tag materials and suggest how/if to address in BP -- due 2009-03-10 -- PENDINGREVIEW

<trackbot> http://www.w3.org/2005/MWI/BPWG/Group/track/actions/910

<jo> ACTION-924?

<trackbot> ACTION-924 -- Daniel Appelquist to and Jeffs to wander the highways and byways of SVG and Canvas and cook something up for the group's approval -- due 2009-04-02 -- PENDINGREVIEW

<trackbot> http://www.w3.org/2005/MWI/BPWG/Group/track/actions/924

<jeffs> two diff versions of the same thing addressed by my draft materials emailed out today

<jeffs> I just set to pending review

<jeffs> +1 to closing 910

<jo> close ACTION-910

<trackbot> ACTION-910 Get review canvas tag materials and suggest how/if to address in BP closed

<EdC> +1

<jeffs> +1

<yeliz> :)

<PhilA2> Short and sweet, bye

<brucel> hugs

Summary of Action Items

[NEW] ACTION: bruce to follow up within Opera as to what exactly the XSS test scripts supplied by chaals guard against [recorded in http://www.w3.org/2009/09/01-bpwg-minutes.html#action01]
 
[End of minutes]

Minutes formatted by David Booth's scribe.perl version 1.135 (CVS log)
$Date: 2009/09/01 13:59:41 $