Re: [rtcweb] security-arch: 5.6.5.3.3: Managing User Login

Michael Procter <michael@voip.co.uk> Wed, 23 July 2014 01:43 UTC

Return-Path: <michael@voip.co.uk>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55EB51A0164 for <rtcweb@ietfa.amsl.com>; Tue, 22 Jul 2014 18:43:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.579
X-Spam-Level:
X-Spam-Status: No, score=-3.579 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T16hCX6yhkOR for <rtcweb@ietfa.amsl.com>; Tue, 22 Jul 2014 18:43:40 -0700 (PDT)
Received: from mail-wi0-f180.google.com (na3sys009aog135.obsmtp.com [74.125.149.84]) by ietfa.amsl.com (Postfix) with SMTP id 17EB01A0151 for <rtcweb@ietf.org>; Tue, 22 Jul 2014 18:43:40 -0700 (PDT)
Received: from mail-wi0-f180.google.com ([209.85.212.180]) (using TLSv1) by na3sys009aob135.postini.com ([74.125.148.12]) with SMTP ID DSNKU88TS8ZF9BQ7xHaLvcsGWZ2pxoAefanT@postini.com; Tue, 22 Jul 2014 18:43:40 PDT
Received: by mail-wi0-f180.google.com with SMTP id n3so1395791wiv.1 for <rtcweb@ietf.org>; Tue, 22 Jul 2014 18:43:38 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=UqDurv3Ewblrs08v8rzfi65hQVqtZeqGxoMptU+oIFo=; b=IdMr5ONGzCBAxnnLlJ5pauzj3NQDLsa/3pOH4wYxMYgG/KD3CkvWmxCgSQG4iT0i/N VFpLpVgZWznrNRA9HBpTqL2sqMZYQp+tKp/INVOikLnhLI/oQQfDli8NqYwl6u+KM0kw MnHaIgKb0nzKbc7JE8pbB860A854eHVUOYl/WQtRpFOByWfYboMx9LnUJsRY+AIHbLp3 YTfQYihhkIjUFFvwIY4W18nG/LfbWL2Y68w9uFVw/uAAAwimqckaAKSgBW/SYF2LC8I+ BZx8iQ9W5l1bp8oLeItj2PObeUMgn0rGXZqfrBWJ7j1ZhxgYzWKjiwLRgm6tCGOIUnFX dYXg==
X-Gm-Message-State: ALoCoQneoUof1/OaX7StGvHERQaEOwLmaa8KD8ysiPVTj4PMVVquuB5G11vzebj/++EjWCRIgyyyM+ecycrtrQoTH2J0XMtgj9kanY1TzdVmji83mWkSRbZIXY0QmF6V6GtcPrE6BKJ8
X-Received: by 10.180.210.239 with SMTP id mx15mr16548142wic.65.1406079818727; Tue, 22 Jul 2014 18:43:38 -0700 (PDT)
MIME-Version: 1.0
X-Received: by 10.180.210.239 with SMTP id mx15mr16548136wic.65.1406079818664; Tue, 22 Jul 2014 18:43:38 -0700 (PDT)
Received: by 10.194.60.178 with HTTP; Tue, 22 Jul 2014 18:43:38 -0700 (PDT)
In-Reply-To: <CABkgnnXYk=g=aDejnJkifcVMz=1yV94OGe1GjgXNObUvNysuVA@mail.gmail.com>
References: <CAPms+wSFrHowOqv+Oc+f+Sq+thUu9b6JBksfVtEJXJ9b8wqghQ@mail.gmail.com> <CABkgnnXYk=g=aDejnJkifcVMz=1yV94OGe1GjgXNObUvNysuVA@mail.gmail.com>
Date: Tue, 22 Jul 2014 21:43:38 -0400
Message-ID: <CAPms+wTHZZXf+BVu48Nat9yndVGYYNtxz8rO3C7-uN=3+mJ6-g@mail.gmail.com>
From: Michael Procter <michael@voip.co.uk>
To: Martin Thomson <martin.thomson@gmail.com>
Content-Type: text/plain; charset=UTF-8
Archived-At: http://mailarchive.ietf.org/arch/msg/rtcweb/A8o3AHhfi8x5oc3yEZf4Bhf5dWU
Cc: "<rtcweb@ietf.org>" <rtcweb@ietf.org>
Subject: Re: [rtcweb] security-arch: 5.6.5.3.3: Managing User Login
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb/>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Jul 2014 01:43:41 -0000

Pull request on github, issue 14

On 22 July 2014 11:50, Martin Thomson <martin.thomson@gmail.com> wrote:
> On 21 July 2014 16:21, Michael Procter <michael@voip.co.uk> wrote:
>>    Once any user
>>    interactions are complete, the IFRAME MUST send a postMessage
>>    [WebMessaging] to its containing window indicating completion, as
>>    described in section 8.2.1 of [webrtc-api].
>
> Sounds like a good idea to me.