Two Security First Public Working Drafts Published

The Web Application Security Working Group has published a Working Draft of Content Security Policy Pinning. This document defines a new HTTP header that allows authors to instruct user agents to remember ("pin") and enforce a Content Security Policy for a set of hosts for a period of time. Learn more about the Security Activity.

The group also published a Working Draft of Upgrade Insecure Requests. This document defines a mechanism which allows authors to instruct a user agent to upgrade a priori insecure resource requests to secure transport before Fetching them. Learn more about the Security Activity.