ISSUE-181

Should there be an authoring practice suggesting http/https URI space consistency

State:
OPEN
Product:
wsc-xit-past-062008
Raised by:
Thomas Roessler
Opened on:
2008-01-17
Description:
ISSUE-123 notes that inconsistent http and https URI spaces for a single web application can break techniques used to steer users toward safer interactions.

Strawman proposal:  Let's add a section to chapter 9 which says:

<head>Offer https URIs that correspond to your http URI space</head>

Web Sites that are available under "http" and "https" URIs should design the URI spaces for these two schemes consistently.  Specifically, when users change a URI's scheme to https, they should arrive at a page that is effectively the same as the page offered through plain http.

Or maybe this should go into 9.3, Use TLS Consistently across the web site?
 
Related Actions Items:
No related actions
Related emails:
  1. Meeting record: 2008-05-13 (from tlr@w3.org on 2008-06-06)
  2. Meeting record: 2008-05-07 (from tlr@w3.org on 2008-06-06)
  3. WSC WG f2f May 2008 Agenda (v 1.1) (from Mary_Ellen_Zurko@notesdev.ibm.com on 2008-05-09)
  4. Re: Agenda: WSC WG distributed meeting, Wednesday, 2008-05-07 (from hahnt@us.ibm.com on 2008-05-06)
  5. Agenda: WSC WG distributed meeting, Wednesday, 2008-05-07 (from Mary_Ellen_Zurko@notesdev.ibm.com on 2008-05-06)
  6. WSC WG f2f May 2008 Agenda (v 1.0) (from Mary_Ellen_Zurko@notesdev.ibm.com on 2008-05-02)
  7. Re: Agenda: WSC WG distributed meeting, Wednesday, 2008-04-30 (from tlr@w3.org on 2008-04-29)
  8. Re: Agenda: WSC WG distributed meeting, Wednesday, 2008-04-30 (from egelman@cs.cmu.edu on 2008-04-29)
  9. Re: Agenda: WSC WG distributed meeting, Wednesday, 2008-04-30 (from maritzaj@cs.columbia.edu on 2008-04-29)
  10. Agenda: WSC WG distributed meeting, Wednesday, 2008-04-30 (from Mary_Ellen_Zurko@notesdev.ibm.com on 2008-04-29)
  11. Meeting record: 2008-03-26 (from tlr@w3.org on 2008-04-03)
  12. [fwd] 03-26-2008 minutes attached (from: Anil.Saldhana@redhat.com) (from tlr@w3.org on 2008-03-28)
  13. Re: ACTION-369: webarch implications of 7.2 (from tlr@w3.org on 2008-01-17)
  14. ISSUE-181: Should there be an authoring practice suggesting http/https URI space consistency [wsc-xit] (from sysbot+tracker@w3.org on 2008-01-17)

Related notes:

No additional notes.

Display change log.


Mary Ellen Zurko <mzurko@us.ibm.com>, Chair, Thomas Roessler <tlr@w3.org>, Staff Contact
Tracker, originally developed by Dean Jackson, is developed and maintained by the Systems Team <w3t-sys@w3.org>.
$Id: index.php,v 1.188 2008/09/04 07:17:30 dom Exp $