Re: Today's transition for www.ietf.org

[Keith Moore <moore@xxxxxxxxxxxxxxxxxxxx>]

On 01/13/2018 07:14 PM, Eric Rescorla wrote:

 It would be best to kill _javascript_ entirely,
given that it's the vector for a myriad of attacks and therefore that
it's become a best practice to disable it in browsers.

I would characterize this more as a minority view than a best practice. _javascript_

is ubiquitous throughout the Web.

I would characterize it as both best practice and a minority view.   We should never assume that best practice is synonymous with widespread practice, especially where security is concerned.

Keith