Liaison statement
Response to Q7/17 "LS on security architecture and operations for web mashup service

Additional information about IETF liaison relationships is available on the IETF webpage and the Internet Architecture Board liaison webpage.
State Posted
Submitted Date 2012-07-31
From Group SEC
From Contact Eliot Lear
To Group ITU-T-SG-17
To Contacts tsbsg17@itu.int
Cc A Kremer <kremer@rans.ru>
Koji Nakao <ko-nakao@kddi.com>
Eliot Lear <lear@cisco.com>
Stephen Farrell <stephen.farrell@cs.tcd.ie>
Sean Turner <turners@ieca.com>
The IETF Chair <chair@ietf.org>
Barry Lieba <barrylieba@computer.org>
Pete Resnick <presnick@qualcomm.com>
jhnah@etri.re.kr
Mark Nottingham <mnot@mnot.net>
Response Contact lear@cisco.com
Technical Contact stephen.farrell@cs.tcd.ie
Purpose In response
Attachments (None)
Liaisons referred by this one LS on security architecture and operations for web mashup services
Body 
The IETF Security Area thanks ITU-T study group 17 for the opportunity to
comment on the proposed new work item, X.websec-5. There are numerous related
activities to this work, including the work of the following IETF working
groups in the Applications and Security areas:

·      Web Security (websec)
·      Web Authorization Protocol (oauth)
·      Transport Layer Security (tls)

We bring to your attention RFC-6454 "The Web Origin Concept",
draft-ietf-websec-frame-options, as well as  draft-ietf-websec-x-frame-options,
each of which looks at improving overall web security of which mashups are
classed.

In addition, we are aware of a considerable amount of effort in this area in
the W3C.

As always, we welcome participation in discussions about IETF protocols through
our mailing lists, websec@ietf.org, oauth@ietf.org, and tls@ietf.org.