| 08:25 | <JakeA> | annevk: samesite cookies in "lax" most stops HEIST today right? Aside from the intranet case of course |
| 08:33 | <annevk> | JakeA: you mean if a site only used samesite cookies? |
| 08:33 | <annevk> | JakeA: and we imagine all browsers support them? |
| 08:35 | <JakeA> | annevk: yes, but that's true for From-Origin too. Both browsers and sites need to add it |
| 08:35 | <annevk> | JakeA: the upside with From-Origin is that you don't have to reinvent login |
| 08:36 | <annevk> | JakeA: migrating all your cookie usage to new patterns (that have usability downsides) seems much harder than adding a flag |
| 08:36 | <annevk> | JakeA: https://tools.ietf.org/html/draft-ietf-httpbis-cookie-same-site is the latest draft btw |
| 08:36 | <annevk> | not 07 |
| 08:38 | <JakeA> | annevk: fair. Samesite's lax option should keep login simple, but agree it's more effort than a flag |
| 08:39 | <JakeA> | Cheers, I was getting a hanging request trying to follow that link earlier. |
| 08:40 | <annevk> | mkwst: what is the repo for same-site? |
| 08:40 | <annevk> | mkwst: https://github.com/mikewest/internetdrafts doesn't seem to be it |
| 08:41 | <annevk> | JakeA: yeah, I think tools.ietf.org has issues |
| 08:41 | <annevk> | I had the same anyway |
| 08:47 | <mkwst> | annevk: https://github.com/httpwg/http-extensions |
| 08:50 | <annevk> | mkwst: https://github.com/httpwg/http-extensions/issues/220 |
| 08:51 | <annevk> | mkwst: also, more Origin Policy use cases: https://github.com/w3c/resource-timing/issues/64#issuecomment-238170658 \o |
| 08:51 | <annevk> | / |
| 08:53 | <mkwst> | annevk: I don't think the origin manifest thing is hurting for use cases. :) |
| 12:09 | <Ms2ger> | background-color: rgb(0 128 0) |
| 12:09 | <Ms2ger> | Wat |
| 12:24 | <ondras> | so, when using html5 dragdrop APIs, is it somehow possible to modify the appearance of the DOM element being dragged (or, rather, its semi-transparent clone)? |
| 14:41 | <annevk> | smaug____: FWIW, zcorpan isn't back until tomorrow or day after |
| 14:42 | <smaug____> | k |
| 14:44 | <smaug____> | annevk: FWIW, I think that change is rather risky but we'll see |
| 14:44 | <smaug____> | it would be nice to get it fixed though |
| 15:12 | <smaug____> | annevk: hmm, so https://html.spec.whatwg.org/multipage/forms.html#dom-textarea/input-setrangetext . how should that work in case selectionStart and selectionEnd return null? |
| 15:13 | <smaug____> | I guess that is a question to zcorpan |
| 15:13 | <smaug____> | oh, nm |
| 15:14 | <smaug____> | it is defined in totally different place that the method throws |
| 16:13 | <annevk> | smaug____: seems like something we should fix |
| 16:13 | <annevk> | Action at a distance is bad |
| 16:14 | <jgraham> | It's Quantum! |
| 16:14 | <jgraham> | Quantum is good, right? |
| 16:23 | <nox> | Quantum Leap |
| 23:00 | <tobie> | TabAtkins: would love your thoughts on https://github.com/tobie/webidl/issues/8 |