<div class="gmail_quote">On Wed, Jul 15, 2009 at 6:48 PM, Aryeh Gregor <span dir="ltr"><<a href="mailto:Simetrical%2Bw3c@gmail.com">Simetrical+w3c@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">On Wed, Jul 15, 2009 at 9:24 PM, Jonas Sicking<jonas@sicking.cc> wrote:<br>
> Note that Content Security Policies[1] can be used to deal with<br>
> clickjacking. So far we've gotten a lot of positive feedback to CSP<br>
> and are in progress of implementing it in firefox. So it's a possible<br>
> solution to this.<br>
<br>
</div>Is Mozilla planning to run CSP through a usual standards body like the<br>
W3C, either before or after implementation? If you plan to<br>
standardize it after implementation, why not before instead? CSP<br>
looks really exciting, but I'm not clear on whether or when it will be<br>
standardized -- I've heard talk of implementing it, but not of<br>
standardizing it.<br>
</blockquote></div><br><div>Didn't Ian, 2 messages back, suggest that vendors experiment and bring their results back to the table at a later date? Or has CSP never been discussed here?</div>