Another sync up for cross-origin-opener-policy & L2 strategy?

[Ryosuke Niwa]

Hi all,

How do you all feel about having another sync up call sometime this week or next week so that we can nail down details of the L1 proposal, and solidify our story for L2 protection?

- R. Niwa

[Artur Janc]

+Anne, Mike directly

I think it's a good idea and I'd dial in; towards the end of this week or Tue-Thu next week works for me.

Are there any particular areas that the most recent updates on https://github.com/whatwg/html/issues/3740 are not getting right? It might be helpful for the sync call if you can chime in on the GH issue or maybe send out a rough list of specific topics in advance (I find it helpful to think through the questions beforehand because this area is quite complex.)

Cheers,

-Artur

--
You received this message because you are subscribed to the Google Groups "isolation-policy" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isolation-poli...@chromium.org.
To post to this group, send email to isolatio...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/isolation-policy/F285CA09-2B24-46D4-9402-D3ED21C54C85%40apple.com.

[Luke Wagner]

I'm interested and have free time Thurs/Friday this week.  Anne and I may have trouble with any meetings scheduled next week due to a weeklong all-Mozilla meeting.

Cheers,

Luke

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/isolation-policy/CAPYVjqrTXnrCv12tywfM0R_2gsJPfJ_bCyK1DWoktPD%2Bjb8sJg%40mail.gmail.com.

[Tobin Titus]

I will be OOF this week, but I’m more than happy to delegate someone else with familiarity on the subject to the call if we decide to have it this week.

 

Tobin

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/isolation-policy/CANBOb-B9DJ9tuK2HrW%2BnH6uz8n97q%3Df6c-yh294Cfh3i4H5Rvg%40mail.gmail.com.

[Charlie Reis]

Yes, scheduling a meeting sounds like a great idea.  I'm free except for an appointment Friday morning, Pacific time.  (I'll try to catch up on the recent posts on the GitHub threads before the call, since I've been OOO for a bit.)

Thanks,

Charlie

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/isolation-policy/MW2PR00MB031377E6F4033380893A1AAECBD00%40MW2PR00MB0313.namprd00.prod.outlook.com.

[Ryosuke Niwa]

Sounds like Thursday or Friday would work best for everyone?

How about Thursday 9:30am or Friday 9:30am?

- R. Niwa

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/isolation-policy/CAH%2B8MBbio%2BOpuTa9CF_k-4xx-p8YmHSTRDqWzr9%2Br4dxHyuD6w%40mail.gmail.com.

[Charlie Reis]

I can do Thursday at 9:30 am but not Friday at 9:30 am.

Charlie

[Artur Janc]

Any of the times above work for me but if US folks can make 8:30am on Thursday I'd go with that. Ryosuke, any chance you can decide on the time and set up the call?

On Wed, Nov 28, 2018 at 11:19 AM Anne van Kesteren <ann...@annevk.nl> wrote:

On Tue, Nov 27, 2018 at 9:36 PM Charlie Reis <cr...@chromium.org> wrote:
> I can do Thursday at 9:30 am but not Friday at 9:30 am.

I'd vastly prefer an hour earlier (assuming this is San Francisco
time). On the other hand, most of my thoughts are in the relevant
issues already. The only quibble I have left around
Cross-Origin-Opener-Policy is that it isn't really about "opener", but
"noopener" isn't either so reusing the name makes some sense. And I'm
also no longer convinced we need "outgoing" there as target=_blank
(new model) and rel=noopener seem sufficient. If we do "outgoing", we
need to consider inheritance. Reading
https://github.com/whatwg/html/issues/4198#issuecomment-442082606
before the meeting would also be good, as that describes the
architecture browsers will need long term, including the various
security boundaries, and gives us some terminology to work with we'll
need for these headers (and in particular to clearly decide on the
details).

[Charlie Reis]

I can do 8:30 am Pacific time on Thursday, if I take the call from home.

Charlie

[Ryosuke Niwa]

How about PST 9am? Some of my colleagues won't be able to make it if it were 8:30am.

- R. Niwa

[Artur Janc]

On Wed, Nov 28, 2018 at 8:30 PM Ryosuke Niwa <rn...@apple.com> wrote:

How about PST 9am? Some of my colleagues won't be able to make it if it were 8:30am.

Works for me.

[Ryosuke Niwa]

Why don’t we schedule it at 9am PST then?

https://www.timeanddate.com/worldclock/meetingdetails.html?year=2018&month=11&day=29&hour=17&min=0&sec=0&p1=283&p2=268

Location	Local Time	Time Zone	UTC Offset
San Jose (USA - California)	Thursday, November 29, 2018 at 9:00:00 am	PST	UTC-8 hours
Zürich (Switzerland - Zurich)	Thursday, November 29, 2018 at 6:00:00 pm	CET	UTC+1 hour
Corresponding UTC (GMT)	Thursday, November 29, 2018 at 17:00:00

Do people have a preference over Skype / Hangout / Cisco preferences?

Perhaps we can reuse https://hangouts.google.com/hangouts/_/google.com/cross-browser if someone from Google can re-enable it?

- R. Niwa

--
You received this message because you are subscribed to the Google Groups "isolation-policy" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isolation-poli...@chromium.org.
To post to this group, send email to isolatio...@chromium.org.

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/isolation-policy/CAPYVjqoqtNKGfv-ZrfXxmBttcDsLrEaBBYQm8FDdRn_H5Zhv1Q%40mail.gmail.com.

[Charlie Reis]

Yep, I should be able to make https://hangouts.google.com/hangouts/_/google.com/cross-browser work for you all.  Let's plan on that at 9 am Pacific no one objects.

Thanks,

Charlie

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/isolation-policy/2887D54D-BBE6-4511-A9F7-A78508897C7B%40apple.com.