Talk:Summit 2011 Working Sessions/Session023 - Revision history

Elke Roth-Mandutz at 20:00, 15 June 2011

2011-06-15T20:00:07Z

Jason Li at 15:07, 8 February 2011

2011-02-08T15:07:30Z

Mark.bristow at 20:55, 20 January 2011

2011-01-20T20:55:12Z

Achim: owasp.org CA

2011-01-07T15:10:22Z

owasp.org CA

Achim: more ..

2011-01-07T15:02:29Z

more ..

Achim: registration item

2011-01-07T10:47:48Z

registration item

Achim: content added

2011-01-07T10:41:02Z

content added

Achim: Emphasise "S" of OWASP

2011-01-07T10:01:05Z

Emphasise "S" of OWASP

Sarah Baso: Created page with ''''Use this page to capture discussion about the OWASP website leading up to the working session.''' My goal is to have a proposal documenting stages of change for OWASP website…'

2011-01-07T07:40:06Z

Created page with ''''Use this page to capture discussion about the OWASP website leading up to the working session.''' My goal is to have a proposal documenting stages of change for OWASP website…'

New page

'''Use this page to capture discussion about the OWASP website leading up to the working session.'''

My goal is to have a proposal documenting stages of change for OWASP website put together ''before'' Summit so we can present and go over it as a group for discussion - [[User:Jason Li]]

= Subdomain Proposal =
Propose subdomain migration:
* Move away from Wiki
** owasp.org/index.php** redirects to -> wiki.owasp.org
** wiki continues to be available as incubator for more mature content
* Main OWASP page
** www.owasp.org is a CMS controlled page with editor approved content
** not necessarily a Wiki
** (professionally) designed to be geared towards public consumption
* Projects Home
** projects.owasp.org -> new home for all OWASP projects
** ideally leverages Google Project Hosting combined with Google Code Review
** provides centralized repository for downloading all projects
** provides consistent look and feel to all projects
* Forums
** forums.owasp.org -> message boards
** supersedes mailing lists
** must be backwards compatible and transparent with current mailing list infrastructure
* Conferences Page
** conf.owasp.org -> home for central conferences
* Community Page
** community.owasp.org?
** community home page to encourage ecosystem
** can hold chapter home pages
** base for OPoints?
[[User:Jason Li]]

Perhaps we also need to discuss (and not discuss):
* Search
** Main site(s)
** Content elsewhere?
* Implementation
** Hosting
** Security aspects
* (avoid talking about the logo!)
[[User:Clerkendweller]]

= On Designs, Layout and Standards =

[[User:Clerkendweller]] To document some of my own thoughts, suggestions, and existing aspects of the current site we don't want to lose track of. These are based on re-reading the 2008 documents, trawling through the leaders' email list for this topic and my own views. All done in pencil, so they can be altered easily.

What URL? SSL? Maintain existing URLs (even if 301 redirects)

[[File:Summit2011-website-cw-00.jpg]]

New page header for the whole / all site(s)?

[[File:Summit2011-website-cw-01.jpg]]

Hang a pure CSS menu off the tabs, so that we can highlight many more pages/resources from every page, but without cluttering up the header. The "Resources for..." is aimed at new visitors, and is probably all new content pages (a lot of work to put these together)... the number suggested is too many, but I didn't want to lose any ideas:

[[File:Summit2011-website-cw-02.jpg]]

Introduce breadcrumb trails:

[[File:Summit2011-website-cw-03.jpg]]

My thoughts were to keep as much as possible in the wiki, and just significantly re-skin the existing/new "introductory" pages. The number of pages styled in the new way can grow as effort permits:

[[File:Summit2011-website-cw-04.jpg]]

The home page and other "introductory" pages will be fully multilingual and have no evidence of being wiki pages (even if they are):

[[File:Summit2011-website-cw-21.jpg]]

and all the other wiki pages get the new header/footer, with most of the wiki management tools moved to a right column, along with cross-links:

[[File:Summit2011-website-cw-22.jpg]]

Standard footer across the whole site:

[[File:Summit2011-website-cw-30.jpg]]

We try to make sure the status bar doesn't display any warnings to "normal" or "appsec" users:

[[File:Summit2011-website-cw-31.jpg]]

We might want to specify some standards/options to include with changes:

[[File:Summit2011-website-cw-40.jpg]]

And keep a centred design which expands, but doesn't stretch too wide:

[[File:Summit2011-website-cw-41.jpg]]

Some of the above might ultimately contribute to a specification.

@@ Line 112: / Line 112: @@
 ** blog.owasp.org
 ** forum.owasp.org
 = Content orgnaization =

← Older revision		Revision as of 15:07, 8 February 2011
Line 118:		Line 118:
	** Need a robust and managable way to add subdomains/root dirs so we can leverage this for conferences		** Need a robust and managable way to add subdomains/root dirs so we can leverage this for conferences
	[[User: mark.bristow]]		[[User: mark.bristow]]
		+
		+	= OWASP Website becomes Portal? =
		+	* Example: http://sourceforge.net/adobe/

@@ Line 101: / Line 101: @@
 ** verified usage of 3'rd party sources (i.e. YUI)
 ** think about (discuss): "what is a trustworthy root CA"
 * general

@@ Line 106: / Line 106: @@
 ** keep people's privacy; i.e. who controls (personal) data at google, and many more<br>(see Jason's mail about ".. need to have gmail account to participate")
-* Subdomains (see previous section also)
+* Subdomains (see [[#Subdomain Proposal]] above also)
 ** blog.owasp.org
 ** forum.owasp.org

← Older revision		Revision as of 10:47, 7 January 2011
Line 103:		Line 103:

	* general		* general
		+	** all processes with private and/or confidential data like registration, billing, etc. need to be done via <nowiki>https://owasp.org/</nowiki>
	** keep people's privacy; i.e. who controls (personal) data at google, and many more<br>(see Jason's mail about ".. need to have gmail account to participate")		** keep people's privacy; i.e. who controls (personal) data at google, and many more<br>(see Jason's mail about ".. need to have gmail account to participate")

@@ Line 23: / Line 23: @@
 * Conferences Page
 ** conf.owasp.org -> home for central conferences
 * Community Page
 ** community.owasp.org?
@@ Line 111: / Line 112: @@
 ** blog.owasp.org
 ** forum.owasp.org

← Older revision		Revision as of 10:41, 7 January 2011
Line 92:		Line 92:
	= Emphasise "S" of OWASP =		= Emphasise "S" of OWASP =
	[[User:Achim]]		[[User:Achim]]
		+	(following items without any preference, order, ... simply unsorted)
		+
		+	* owasp.org
		+	** <nowiki>https://owasp.org/</nowiki> fully controlled by OWASP
		+	** <nowiki>https://owasp.org/</nowiki> with trustworthy certificates<br>[[File:HTTPS-owasp.org.png]] [[File:HTTPS-owasp.org-mixed.png]]
		+	** all content needs to be visible without enabling client-side scripting<br>this is not only a security but also a requirement for handicapped accessibility
		+	** selfcontained owasp.org, means that 3'rd party includes (i.e. YUI) must be local
		+	** verified usage of 3'rd party sources (i.e. YUI)
		+	** think about (discuss): "what is a trustworthy root CA"
		+
		+	* general
		+	** keep people's privacy; i.e. who controls (personal) data at google, and many more<br>(see Jason's mail about ".. need to have gmail account to participate")
		+
		+	* Subdomains (see previous section also)
		+	** blog.owasp.org
		+	** forum.owasp.org

← Older revision		Revision as of 10:01, 7 January 2011
Line 89:		Line 89:

	Some of the above might ultimately contribute to a specification.		Some of the above might ultimately contribute to a specification.
		+
		+	= Emphasise "S" of OWASP =
		+	[[User:Achim]]