[websec] agenda for Beijing: topics and presentation ideas?

[Tobias Gondrom <[e-mail]>]

 Hello dear fellow websec members,

am currently working on the agenda for our meeting in Beijing.
we have a session on Tuesday Nov-9, 1300-1500 (Afternoon Session)

Please send proposals for presentations or agenda items to me or to the
list ASAP!

>From the past discussions on the list I could see there are a lot of
topics to discuss:
1. requirements doc: please we still need at least a straw-man as basis
for discussion - any volunteers please???
maybe s.th. based on Jeff and Andy's whitepaper
(http://w2spconf.com/2010/papers/p11.pdf)
2. progress and discussion on
- Origin: draft-abarth-mime-sniff
- Media-Type Sniffing: draft-abarth-origin
- Strict Transport Security: draft-hodges-strict-transport-sec
(btw. if you haven't read the IDs yet, maybe now a good time to read
them and post feedback on the list)
4. usage of DNSSEC for strict sec?
5. integrity of the browser and server?
6. overall framework: are there ideas how to fit our various points into
an overarching concept? Any proposals, straw-man presentations -
volunteers please?
7. X-FRAME-OPTIONS (or better FRAME-OPTIONS http header): any volunteer
to throw a proposal in the ring?
8... ?

Kind regards and please volunteers contact me ASAP (email, phone)!
(I think we can also arrange for remote presentation facility using
webex, if a presenter can't make it to Beijing.)

Tobias


Tobias Gondrom
email: [e-mail]
mobile: [phone]