Summit 2011 Working Sessions/Session005

Global Summit 2011 Home Page
Global Summit 2011 Tracks

Site Security Policy
Please see/use the 'discussion' page for more details about this Working Session
Working Sessions Operational Rules - Please see here the general frame of rules.

WORKING SESSION IDENTIFICATION
Short Work Session Description	Are new opt-in HTTP headers the right way to add security features? For example: HTTP Strict Transport Security for enforced HTTPS (supported in Chrome 4, Firefox+NoScript, Firefox 4 and up) X-Frame-Options for non-framing (supported in IE8, FF3.6, Safari 4, Opera 10.5, Chrome 4 and up) Content Security Policy for whitelisting of script and media sources (supported in Firefox 4 and up)
Related Projects (if any)	Browser Security Track - main page Google Group for the Browser Security Track
Email Contacts & Roles	Chair John Wilander @ Michal Coates @	Operational Manager John Wilander @	Mailing list https://groups.google.com/group/owasp-summit-browsersec

WORKING SESSION SPECIFICS
Objectives
Venue/Date&Time/Model	Venue/Room OWASP Global Summit Portugal 2011	Date & Time Tuesday, 09 February Time: TBA	Discussion Model The working form will most probably be short presentations to frame the topic and then round table discussions. Depending on number of attendees we'll break into groups.

WORKING SESSION OPERATIONAL RESOURCES
Projector, whiteboards, markers, Internet connectivity, power

WORKING SESSION ADDITIONAL DETAILS

Co-chair John Wilander John Wilander is chapter co-leader in Sweden and ran the AppSec conference in Stockholm 2010. He is still pursuing his PhD in software security and works as an appsec consultant in media/banking/healthcare. Co-chair Michael Coates Michael Coates is a long-time OWASP contributor and leader, as well as a Mozilla employee. He leads the AppSensor and the TLS Cheat Sheet project.

WORKING SESSION OUTCOMES / DELIVERABLES
Proposed by Working Group	Approved by OWASP Board
Browser Security Report	After the Board Meeting - fill in here.
Browser Security Priority List	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.

Working Session Participants

(Add you name by clicking "edit" on the tab on the upper left side of this page)

WORKING SESSION PARTICIPANTS
Name	Company	Notes & reason for participating, issues to be discussed/addressed
John Wilander @
Michael Coates @
Eduardo Vela @	Google
Stefano Di Paola
Tobias Gondrom @	IETF
Alexandre Miguel Aniceto @	Willway

</includeonly>