Re: [websec] Joel Jaeggli's No Objection on draft-ietf-websec-x-frame-options-09: (with COMMENT)

Tobias Gondrom <tobias.gondrom@gondrom.org> Sat, 17 August 2013 22:48 UTC

Return-Path: <tobias.gondrom@gondrom.org>
X-Original-To: websec@ietfa.amsl.com
Delivered-To: websec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E7E2811E815F for <websec@ietfa.amsl.com>; Sat, 17 Aug 2013 15:48:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -95.361
X-Spam-Level:
X-Spam-Status: No, score=-95.361 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001, RDNS_DYNAMIC=0.1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MLSPhbF5mQgD for <websec@ietfa.amsl.com>; Sat, 17 Aug 2013 15:48:02 -0700 (PDT)
Received: from lvps176-28-13-69.dedicated.hosteurope.de (lvps176-28-13-69.dedicated.hosteurope.de [176.28.13.69]) by ietfa.amsl.com (Postfix) with ESMTP id A0E0221F9C6B for <websec@ietf.org>; Sat, 17 Aug 2013 15:47:58 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=gondrom.org; b=oGXMr+H38SZ3veIhMkP17vgJ8hglsOUx0MVYlibC7zyUrNAcjdUniM4xguNOaw63thrrqzV+g8L75KazVat5iQ1f5uA2IgTy9TEpwhaCtp9LrmYkdSqPulk+uYQvNXWL; h=Received:Received:Message-ID:Date:From:User-Agent:MIME-Version:To:CC:Subject:References:In-Reply-To:X-Enigmail-Version:Content-Type;
Received: (qmail 24369 invoked from network); 18 Aug 2013 00:47:57 +0200
Received: from 188-222-103-191.zone13.bethere.co.uk (HELO ?192.168.1.64?) (188.222.103.191) by lvps176-28-13-69.dedicated.hosteurope.de with ESMTPSA (DHE-RSA-AES256-SHA encrypted, authenticated); 18 Aug 2013 00:47:57 +0200
Message-ID: <520FFD9D.2000401@gondrom.org>
Date: Sat, 17 Aug 2013 23:47:57 +0100
From: Tobias Gondrom <tobias.gondrom@gondrom.org>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130804 Thunderbird/17.0.8
MIME-Version: 1.0
To: joelja@bogus.com
References: <20130815034155.27991.62074.idtracker@ietfa.amsl.com>
In-Reply-To: <20130815034155.27991.62074.idtracker@ietfa.amsl.com>
X-Enigmail-Version: 1.5.2
Content-Type: multipart/alternative; boundary="------------000308020208050002030306"
Cc: draft-ietf-websec-x-frame-options@tools.ietf.org, websec@ietf.org, iesg@ietf.org, websec-chairs@tools.ietf.org
Subject: Re: [websec] Joel Jaeggli's No Objection on draft-ietf-websec-x-frame-options-09: (with COMMENT)
X-BeenThere: websec@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Web Application Security Minus Authentication and Transport <websec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/websec>, <mailto:websec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/websec>
List-Post: <mailto:websec@ietf.org>
List-Help: <mailto:websec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/websec>, <mailto:websec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 17 Aug 2013 22:48:07 -0000

On 15/08/13 04:41, Joel Jaeggli wrote:
> Joel Jaeggli has entered the following ballot position for
> draft-ietf-websec-x-frame-options-09: No Objection
>
> When responding, please keep the subject line intact and reply to all
> email addresses included in the To and CC lines. (Feel free to cut this
> introductory paragraph, however.)
>
>
> Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html
> for more information about IESG DISCUSS and COMMENT positions.
>
>
> The document, along with other ballot positions, can be found here:
> http://datatracker.ietf.org/doc/draft-ietf-websec-x-frame-options/
>
>
>
> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
>
> support richards discussion, the security/privacy considerations could
> use some wordsmithing.
>
>
Ok. As answered to Richard. Security and Privacy consideration sections
have been expanded in version -10
Thanks for the review and all the best, Tobias