Options:
- # Session Start: Fri Jun 29 00:00:00 2007
- # Session Ident: #html-wg
- # [00:01] <hsivonen> the IBM distro is broken
- # [00:01] <hsivonen> sigh
- # [00:05] * Quits: mjs (mjs@17.255.100.184) (Connection reset by peer)
- # [00:10] * Quits: schnitz_ (Miranda@84.153.74.138) (Connection reset by peer)
- # [00:11] * Quits: gavin (gavin@74.103.208.221) (Ping timeout)
- # [00:14] * Quits: myakura (myakura@58.88.37.26) (Quit: Leaving...)
- # [00:16] * Joins: gavin (gavin@74.103.208.221)
- # [00:17] * Quits: anne (annevk@80.203.24.6) (Ping timeout)
- # [00:50] * Quits: heycam (cam@124.168.130.154) (Ping timeout)
- # [00:52] * Quits: Sander (svl@71.57.109.108) (Quit: And back he spurred like a madman, shrieking a curse to the sky.)
- # [00:56] * Quits: kingryan (rking3@208.66.64.47) (Quit: kingryan)
- # [01:02] * Quits: briansuda (briansuda@85.220.95.76) (Quit: briansuda)
- # [01:20] * Joins: mjs (mjs@17.255.100.184)
- # [01:24] * Joins: sbuluf (tb@200.49.140.143)
- # [01:31] * Joins: heycam (cam@130.194.72.84)
- # [01:34] * Quits: tH (Rob@87.102.84.66) (Quit: ChatZilla 0.9.78.1-rdmsoft [XULRunner 1.8.0.9/2006120508])
- # [01:56] * Joins: karl (karlcow@128.30.52.30)
- # [02:02] * MikeSmith smiles at "Hint: it's not the air force."
- # [02:32] * Quits: edas (edaspet@88.191.34.123) (Ping timeout)
- # [02:51] * Joins: olivier (ot@128.30.52.30)
- # [03:10] * Joins: polin8 (polin8@24.184.204.6)
- # [03:28] * Quits: zcorpan_ (zcorpan@84.216.42.249) (Ping timeout)
- # [03:39] * Quits: polin8 (polin8@24.184.204.6) (Quit: polin8)
- # [03:45] * Quits: gavin (gavin@74.103.208.221) (Ping timeout)
- # [03:50] * Joins: gavin (gavin@74.103.208.221)
- # [04:48] <karl> http://www.w3.org/Talks/9704WWW6-HTML/
- # [04:48] <karl> Leading the Evolution of HTML
- # [04:48] <karl> April 1997
- # [04:48] <mjs> Cougar!
- # [04:48] <mjs> *rawr*
- # [04:48] <karl> yep it was the nickname of the spec
- # [04:49] <karl> http://www.w3.org/MarkUp/Cougar/
- # [04:50] * Quits: dbaron (dbaron@63.245.220.242) (Quit: 8403864 bytes have been tenured, next gc will be global.)
- # [04:54] * karl feels like mjs wants to call it Leopard :p
- # [04:56] <karl> http://lists.w3.org/Archives/Public/www-html/1997Apr/0032.html
- # [04:57] <karl> """My overall feeling is that this is even more a "codification of
- # [04:57] <karl> current practice" than HTML 3.2 is. Frames, scripts, it's all in
- # [04:57] <karl> there. There are a few little changes, but mostly it seems taken
- # [04:57] <karl> directly from how Netscape/IE implement things. The only really
- # [04:57] <karl> noteworthy change I saw was that NOFRAMES is finally given a purpose;
- # [04:57] <karl> it can now be used anywhere in BODY to hide material for frames-capable
- # [04:57] <karl> browsers. Nice one."""
- # [04:57] <karl> The life is a never ending repeating story
- # [04:58] <karl> except that people have short memories or are too young to remember
- # [05:21] * Quits: jgraham (jgraham@81.86.213.130) (Connection timed out)
- # [05:52] * Quits: gavin (gavin@74.103.208.221) (Ping timeout)
- # [05:57] * Joins: gavin (gavin@74.103.208.221)
- # [06:26] * Joins: hyatt (hyatt@24.238.171.189)
- # [08:00] * Quits: gavin (gavin@74.103.208.221) (Ping timeout)
- # [08:05] * Joins: gavin (gavin@74.103.208.221)
- # [08:57] * Joins: tH (Rob@87.102.84.66)
- # [09:19] <karl> http://loud.anotherquietday.com/post/4459238
- # [09:20] <karl> DOM Storage: XSS 2.0
- # [09:20] <karl> A few short notes on the security implications of the new HTML5 browser features in Firefox (and probably Opera).
- # [09:20] <karl> The short version is that it enables an offline, cross-domain web worm.
- # [09:21] <mjs> that seems somewhat imaginary
- # [09:22] <karl> mjs: you mean it is not possible at all, or there is a chance?
- # [09:22] <mjs> many steps in his supposed exploit are not possible
- # [09:23] <karl> ok
- # [09:23] <mjs> "scans your history for known vulnerable sites and spreads itself to them" "resubmit its new version to those it previously infected"
- # [09:24] <mjs> this shows misunderstandings of how XSS worms propagate
- # [09:24] <Lachy> what is that supposed to mean?
- # [09:24] <Lachy> is he saying it can upload itself to other websites?
- # [09:24] <mjs> you can't use the client-side storage as a vector to attack new sites per se
- # [09:25] <mjs> you could use it as a way for multiple compromised sites to exchange info
- # [09:25] <mjs> but you don't need a browser as a vector for that
- # [09:26] * Quits: hyatt (hyatt@24.238.171.189) (Quit: hyatt)
- # [09:31] * Quits: karl (karlcow@128.30.52.30) (Quit: Where dwelt Ymir, or wherein did he find sustenance?)
- # [09:31] <sbuluf> OpenBSD founder Theo de Raadt has now provided more details and analysis on outstanding, fixed, and non-fixable Core 2 bugs. Some choice quotes: 'Some of these bugs... will *ASSUREDLY* be exploitable from userland code...
- # [09:31] <sbuluf> http://hardware.slashdot.org/hardware/07/06/28/1124256.shtml
- # [09:31] <sbuluf> offtopic, but perhaps helpful for some
- # [09:33] * Joins: Jero (Jero@213.46.207.230)
- # [09:37] * Quits: heycam (cam@130.194.72.84) (Quit: bye)
- # [09:51] * Joins: edas (edaspet@88.191.34.123)
- # [09:51] * Quits: mjs (mjs@17.255.100.184) (Quit: mjs)
- # [10:00] * Joins: heycam (cam@203.214.109.180)
- # [10:02] * Joins: zcorpan_ (zcorpan@84.216.42.220)
- # [10:07] * Quits: gavin (gavin@74.103.208.221) (Ping timeout)
- # [10:12] * Joins: gavin (gavin@74.103.208.221)
- # [10:19] * Joins: anne (annevk@213.236.208.22)
- # [10:37] * Joins: polin8 (polin8@24.184.204.6)
- # [10:41] * Joins: mjs (mjs@64.81.48.145)
- # [10:41] * Joins: ROBOd (robod@86.34.246.154)
- # [10:44] <heycam> Hixie, s/preceed/preced/g
- # [10:49] * Quits: polin8 (polin8@24.184.204.6) (Quit: polin8)
- # [11:03] * Quits: olivier (ot@128.30.52.30) (Quit: Leaving)
- # [11:06] <Hixie> heycam: ?
- # [11:06] <heycam> in the HTML 5 document
- # [11:06] * Joins: foca (foca@190.64.35.2)
- # [11:07] * Parts: foca (foca@190.64.35.2)
- # [11:07] <heycam> preceeding -> preceding, preceeded -> preceded
- # [11:07] * heycam heads out
- # [12:28] <anne> two formal objections now
- # [12:30] <mjs> to what?
- # [12:30] <mjs> publishing differences document?
- # [12:31] <anne> yeah
- # [12:31] <anne> http://www.w3.org/2002/09/wbs/40318/trdiff/results
- # [12:33] <beowulf> the document is called "HTML 5 differences from HTML 4" not "Why HTML 5 is different from HTML 4"
- # [12:34] <mjs> Gregory Rosmaita just repeated his FO to adopting HTML5 basically
- # [12:34] <beowulf> he did
- # [12:36] <zcorpan_> seems people want the document to contain more rationales
- # [12:36] * Joins: myakura (myakura@58.88.37.26)
- # [12:37] <mjs> it's impossible to give a rationale for the current status of an undecided issue
- # [12:38] <zcorpan_> why not? "it hasn't been investigated yet"
- # [12:38] <beowulf> i just see it as a fancy diff document
- # [12:39] <anne> it's not something special
- # [12:39] <anne> it's not normative
- # [12:39] <anne> it was already widely published on blogs etc.
- # [12:39] <beowulf> if you start adding rationales it'll become too labour intensive imo
- # [12:39] <zcorpan_> though it says "... and provides some of the rationale for the changes"
- # [12:39] <anne> sure
- # [12:40] <anne> _some_
- # [12:40] <beowulf> oh then i object, remove that line :)
- # [12:40] <zcorpan_> yeah. true
- # [12:40] <anne> mostly for the new features and the dropping of presentational markup
- # [12:40] <anne> and shorter doctype and things like that
- # [12:41] <zcorpan_> we could publish a rationale draft after 3 months :)
- # [12:43] * zcorpan_ wonders why no-one complained about s/XHTML1/XHTML 1/
- # [12:43] <anne> someone did, DanC pointed out that it was clear enough
- # [12:51] * Quits: sbuluf (tb@200.49.140.143) (Ping timeout)
- # [12:56] <hsivonen> hmm. Microsoft hasn't responded the the trdiff questionnaire
- # [12:56] <hsivonen> neither has IBM
- # [12:58] <hsivonen> oh. we have another FO
- # [13:36] * Quits: gavin (gavin@74.103.208.221) (Ping timeout)
- # [13:39] * Quits: MikeSmith (MikeSmith@mcclure.w3.org) (Quit: Less talk, more pimp walk.)
- # [13:41] * Joins: gavin (gavin@74.103.208.221)
- # [13:43] <Lachy> the FO on the trdiff survey doesn't make much sense. She seems to assume that the draft needs to be complete and have no open issues before publication of a FPWD
- # [13:44] <Lachy> in particular, rationale for every dropped/added/changed element and attribute is unrealistic, since the spec isn't finished, and not all have been decided yet
- # [13:44] <anne> which would mean it would be released in 2020
- # [13:44] <Lachy> indeed
- # [13:45] <Lachy> given the pace at which this group works, I'd push that back to 2030
- # [13:54] * Lachy updates my response http://www.w3.org/2002/09/wbs/40318/trdiff/results
- # [13:59] * Joins: polin8 (polin8@209.176.7.3)
- # [14:15] * Quits: polin8 (polin8@209.176.7.3) (Quit: :wq)
- # [14:31] * Quits: ROBOd (robod@86.34.246.154) (Quit: http://www.robodesign.ro )
- # [15:43] * Quits: gavin (gavin@74.103.208.221) (Ping timeout)
- # [15:48] * Joins: gavin (gavin@74.103.208.221)
- # [16:07] * Quits: xover (xover@193.157.66.5) (Quit: Leaving)
- # [16:12] * Joins: laplink (link@193.157.66.214)
- # [16:13] * Joins: xover (xover@193.157.66.5)
- # [16:23] * Joins: ROBOd (robod@86.34.246.154)
- # [16:25] * Joins: billmason (billmason@69.30.57.156)
- # [16:32] * Quits: edas (edaspet@88.191.34.123) (Ping timeout)
- # [16:34] * Parts: mw22 (chatzilla@84.41.169.151)
- # [16:44] * Joins: MikeSmith (MikeSmith@mcclure.w3.org)
- # [17:11] <anne> heh, people are actually recommending @summary='This is a layout table'
- # [17:12] <billmason> Reading that makes my head hurt.
- # [17:37] * Parts: zcorpan_ (zcorpan@84.216.42.220)
- # [17:40] * Quits: myakura (myakura@58.88.37.26) (Ping timeout)
- # [17:41] * Joins: myakura (myakura@58.88.37.26)
- # [17:50] * Quits: gavin (gavin@74.103.208.221) (Ping timeout)
- # [17:51] * Joins: briansuda (briansuda@85.220.95.76)
- # [17:55] * Joins: gavin (gavin@74.103.208.221)
- # [17:58] * Quits: tH (Rob@87.102.84.66) (Connection reset by peer)
- # [17:58] * Joins: tH (Rob@87.102.89.234)
- # [18:00] * Quits: MikeSmith (MikeSmith@mcclure.w3.org) (Ping timeout)
- # [18:01] * Joins: zcorpan_ (zcorpan@84.216.42.220)
- # [18:07] * Joins: kazuhito (kazuhito@222.151.149.40)
- # [18:25] * Quits: briansuda (briansuda@85.220.95.76) (Quit: briansuda)
- # [18:27] * Joins: Sander (svl@71.57.109.108)
- # [18:28] <zcorpan_> i wonder if steve faulkner would withdraw his objection if html4-differences changed "dropped" to "not included" (or "not (yet) included")
- # [18:34] * Joins: briansuda (briansuda@85.220.95.76)
- # [18:59] <beowulf> one more FO
- # [19:08] * Quits: myakura (myakura@58.88.37.26) (Quit: Leaving...)
- # [19:22] <zcorpan_> i expect there will be ~ 3 FOs for every survey where you can FO, regardless of what the survey is about
- # [19:37] <zcorpan_> http://www.accessifyforum.com/viewtopic.php?p=53884#53884
- # [19:43] * Quits: Martin (mart@62.3.242.131) (Ping timeout)
- # [19:56] <DanC> the ~ 3 FOs regardless does seem somewhat likely. I just sent some thoughts on the FOs, in hopes of directing that energy in more useful directions
- # [19:57] * gavin_ wonders why DanC's message in the "un-subscribe while remaining a member" thread got marked as junk
- # [19:57] <DanC> marked... that's a local issue, yes?
- # [19:58] * Joins: Martin (mart@62.3.242.131)
- # [19:58] * Quits: gavin (gavin@74.103.208.221) (Ping timeout)
- # [19:59] <gavin_> DanC: yes, I just found it odd
- # [20:02] * Joins: kingryan (rking3@208.66.64.47)
- # [20:03] * Quits: kazuhito (kazuhito@222.151.149.40) (Quit: Computer goes to sleep!)
- # [20:03] * Joins: gavin (gavin@74.103.208.221)
- # [20:06] * Parts: zcorpan_ (zcorpan@84.216.42.220)
- # [20:10] * Quits: xover (xover@193.157.66.5) (Ping timeout)
- # [20:10] * Quits: laplink (link@193.157.66.214) (Ping timeout)
- # [20:11] <Lachy> calling them Omitted Attributes, rather than Dropped Attributes, would probably be better, since dropped gives the impression that they won't be included, whereas omitted makes it more clear that it represents the current state of the spec
- # [20:12] <Lachy> similarly for Dropped Elements
- # [20:12] * Joins: zcorpan_ (zcorpan@84.216.42.220)
- # [20:19] * Joins: xover (xover@193.157.66.5)
- # [20:19] * Joins: laplink (link@193.157.66.214)
- # [20:21] <gavin_> I like Lachy's idea
- # [21:15] <hsivonen> nice chicken and egg problem. if we don't publish a diff document, group participants who can't be bothered to read the whole spec draft themselves complain that it is hard to review it
- # [21:16] <hsivonen> if we try to publish an introductionary diff overview documenting the state of the current draft, people object that the spec should be done first
- # [21:17] <gavin_> heh
- # [21:17] <Lachy> I just posted a mail explaining why adding detailed rationale would be a bad idea. I hope the people who have objected for that reason understand and remove their objections
- # [21:17] <Lachy> and why it's also not possible
- # [21:18] <Hixie> i love this diff document
- # [21:18] <Hixie> it's taking all the flak away from the spec :-P
- # [21:32] <gsnedders> how do browsers deal with LF separated HTTP headers?
- # [21:32] <Lachy> gsnedders: test it and let us know :-)
- # [21:33] <gsnedders> I know they manage to parse it, I just don't know what the details of it are. Do they just allow any line break where the spec says CRLF? I dunno…
- # [21:34] <Lachy> I suspect they would treat CR and LF the same as CRLF, though I don't know for sure
- # [21:34] <gsnedders> I'd look at Gecko's source, but I haven't a clue where it'd be
- # [21:35] <gsnedders> Lachy: my suspicion, too
- # [21:35] * Lachy is wondering how it could be tested
- # [21:35] <gsnedders> It's hard.
- # [21:35] <Lachy> both how to set up a server to send LF or CR instead of CRLF, and how to make observations in browsers that give reliable results
- # [21:39] <Philip`> Is http://lxr.mozilla.org/mozilla/source/netwerk/protocol/http/src/nsHttpResponseHead.cpp#131 relevant? (That appears to only accept "\r\n")
- # [21:41] <Lachy> I wonder if there are any servers that don't send CRLF. I'm sure all the major ones would get it write, but perhaps some custom written server would get it wrong
- # [21:41] <Lachy> s/write/right/
- # [21:51] <gsnedders> http://www.thinkgeek.com/thinkgeek.rss has LF, and claims to be Apache 1.3.28
- # [21:51] * Joins: hasather (hasather@80.203.71.22)
- # [21:52] <gsnedders> Philip`: it must be dealt with before there
- # [21:54] <Lachy> gsnedders: what did you use to inspect the headers of that site?
- # [21:54] <gsnedders> Lachy: I just downloaded the raw HTTP content through cURL and used a text editor
- # [21:54] <Lachy> ok
- # [21:55] <Lachy> I have cURL installed. What parameters should I use (if any)?
- # [21:56] <hasather> Lachy: congrats on the job
- # [21:56] <Lachy> heh, Fiddler reported the error in the headers to me
- # [21:57] <gsnedders> Lachy: -i
- # [22:04] <gsnedders> moz seems to use LF after CRLF has failed in certain ways
- # [22:06] * Quits: gavin (gavin@74.103.208.221) (Ping timeout)
- # [22:07] * Philip` just tried some tests with HTTP header newlines
- # [22:08] <Philip`> IE7 and Opera 9.2 seem to treat \r and \n and \r\n identically
- # [22:08] <gsnedders> same with Saf
- # [22:08] <Philip`> FF trunk seems to split only on \r\n and on \n
- # [22:09] <gsnedders> so you can't mix them, but you can in IE and Opera?
- # [22:09] <Philip`> and FF trunk treats \n\r as if it's a line-split and then the next header's name has "\r" on the front
- # [22:10] <gsnedders> HTTP5. kthxbai.
- # [22:10] <Philip`> or maybe that's not true, but at least it doesn't pick up the next header with its correct name
- # [22:11] <Philip`> (I can't seem to access the \r-prefixed header via any spelling I can think of...)
- # [22:11] * Joins: gavin (gavin@74.103.208.221)
- # [22:13] <Philip`> Oh, right, it totally deletes the header after the \n\r
- # [22:13] <Philip`> (FF2 is the same as FF trunk)
- # [22:13] * gsnedders sighs
- # [22:13] <gsnedders> HTTP parsing is too complex.
- # [22:15] <Philip`> Also, in XHR getAllResponseHeaders, IE7 and Opera return it with all lines separated \r\n, and FF return separated by \n
- # [22:16] <Philip`> *returns
- # [22:21] <DanC> and now for something completely different... "mTLD Top Level Domain Limited has joined the HTML Working Group"
- # [22:22] * DanC wonders when we'll hit 500
- # [22:22] * gsnedders wonders who'll be #666
- # [22:22] <DanC> 485 group participants
- # [22:23] <Philip`> Judging by my test, Safari does the same as FF (splitting on \r\n and \n, not splitting on \r)
- # [22:25] <Philip`> though Safari does create an actual header named "\rwhatever" (when you send it "...\n\rwhatever: ...") which you can read back via that name
- # [22:26] <Philip`> ("Safari" = 3.0.2 on Windows)
- # [22:28] <Philip`> (My test = http://canvex.lazyilluminati.com/misc/reflect.py + http://canvex.lazyilluminati.com/misc/headers.html - download into one place, run the .py, visit http://localhost:1079/)
- # [22:30] <DanC> cool, Philip` . Thanks for the details
- # [22:30] * Quits: mjs (mjs@64.81.48.145) (Ping timeout)
- # [22:30] * DanC wishes for more time to follow up on testing
- # [22:30] * Joins: mjs (mjs@64.81.48.145)
- # [22:34] <mjs> are those the dot mobi crowd?
- # [22:36] <DanC> yes
- # [22:36] <DanC> at least... I think so
- # [22:41] <hsivonen> their business is based on a vision that is contrary to the vision of the position paper behind HTML5...
- # [22:45] * Quits: ROBOd (robod@86.34.246.154) (Quit: http://www.robodesign.ro )
- # [22:48] * Joins: Lionheart (robin@198.86.248.1)
- # [22:58] * Joins: zcorpan (zcorpan@84.216.42.220)
- # [22:59] <DanC> which position paper?
- # [23:00] * Quits: zcorpan_ (zcorpan@84.216.42.220) (Ping timeout)
- # [23:01] <zcorpan> DanC: http://www.w3.org/2004/04/webapps-cdf-ws/papers/opera.html
- # [23:02] <DanC> ah
- # [23:06] * Quits: briansuda (briansuda@85.220.95.76) (Quit: briansuda)
- # [23:14] * Quits: Lionheart (robin@198.86.248.1) (Ping timeout)
- # [23:25] * Joins: jgraham (jgraham@81.86.223.28)
- # [23:29] * Joins: briansuda (briansuda@85.220.95.76)
- # [23:31] * Quits: mjs (mjs@64.81.48.145) (Quit: mjs)
- # [23:32] * Joins: Lionheart (robin@198.86.248.1)
- # [23:34] * Parts: hasather (hasather@80.203.71.22)
- # [23:35] * Quits: Sander (svl@71.57.109.108) (Quit: And back he spurred like a madman, shrieking a curse to the sky.)
- # [23:42] * Quits: jgraham (jgraham@81.86.223.28) (Connection timed out)
- # [23:57] * Quits: Jero (Jero@213.46.207.230) (Quit: ChatZilla 0.9.78.1 [Firefox 2.0.0.4/2007051502])
- # Session Close: Sat Jun 30 00:00:00 2007
The end :)