Editor's draft: https://w3c.github.io/webappsec-suborigins/

You can publish a new draft by typing make publish (which simply pushes the local master branch to GitHub's gh-pages branch).

Pull requests happily reviewed.