Mike West

Archived proposal from 2018. Perhaps the approach in mikewest/scheming-cookies will be more successful!

mikewest

Personal draft of the Web Application Security WG's Content Security Policy specification.

mikewest

Incrementally better cookies.

mikewest

Credential Management

mikewest

`document.domain` intentionally weakens the only security boundary we have. Perhaps we can dump it?

mikewest

Incrementally better HTTP state management.

mikewest

Wrapper scripts for running JSLint locally, and for generating test reports for Hudson

mikewest

Nginx doesn't generate etags for static content. I'd like it to. Let's see if I can remember some C from college.

mikewest

https://noncombatant.org/2014/03/11/privacy-and-security-settings-in-chrome/

mikewest

mikewest