Brandon Sterne wrote on 4/10/2009 10:46 AM: 
> I'm not 100% thrilled with the idea either, mostly because parsing the
> U-A string could be challenging for some sites.  But it does seems to be
> the least bad idea I've heard.  We can certainly minimize U-A bloat by
> making our subproduct something like "CSP/1".  I'm certainly open to
> other suggestions, though.

I proposed an alternative earlier in the thread:

http://groups.google.com/group/mozilla.dev.security/browse_thread/thread/c0f1a44e4fb98859#anchor_ffeba39158c82a91


- Bil

_______________________________________________
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security

Reply via email to