Re: [HASMAT] moving forward

[Brandon Sterne <[e-mail]>]

On 08/20/2010 11:08 AM, Peter Saint-Andre wrote:
> Following up on the successful BoF we held in Maastricht, I'd like to
> keep us moving toward formation of a working group. Here are some open
> tasks:

Thanks, Peter, for keeping the ball rolling here.

> 2. Charter. We had some feedback at the BoF about charter revisions,
> especially focusing on the three drafts under immediate consideration
> and removing the text about developing a long-term framework for web
> security.

Not being present at the BoF, I missed the discussion about removing the
creation of a long-term security framework.  If the group focuses on
standardizing a small set of security mechanisms won't it be
contributing to the "sprinkling" problem in the first part of the
Objectives and Scope section?

> 3. Name. Some people have said that "HASMAT" isn't very descriptive of
> the subject matter, and that we might want something like "WEBSEC". As
> long as folks don't think "WEBSEC" means that we'd be working on
> everything under the sun related to the security of the web, I'd be fine
> with a name like that. Other suggestions are welcome.

Personally, I do think WEBAPPSEC is the right name.  Someone pointed out
that webappsec.org is registered already, but that space is occupied by
the Web Application Security Consortium who generally go by the acronym
WASC.  Other than the domain issue, is this still a problem?

Cheers,
Brandon