W3C home > Mailing lists > Public > public-appformats@w3.org > March 2007

Re: [AC] Access Control Algorithm

From: Thomas Roessler <tlr@w3.org>
Date: Tue, 27 Mar 2007 16:01:34 +0200
To: Anne van Kesteren <annevk@opera.com>
Cc: "WAF WG (public)" <public-appformats@w3.org>
Message-ID: <20070327140134.GR3485@raktajino.does-not-exist.org>

On 2007-03-27 15:57:28 +0200, Anne van Kesteren wrote:

> You mean the following I think:
> 
>   [([*.*.example.com], [*.corp.example.com])
>   ,([bigboss.corp.example.com], [])]

> (Note the extra * before example.com.) 

I think it's an open issue whether a "*" matches a label or an
arbitrary subdomain.  For the sake of argument, I was assuming it to
match an arbitrary subdomain.

> I agree that this is indeed much easier to address using your
> proposal unless we try to go into the "* is less important than
> label" thing again which would probably make it more complicated.

We were in the "priority" department before; that algorithm *really*
wasn't understood by anybody, and the pair approach was the response
to that.

Regards,
-- 
Thomas Roessler, W3C  <tlr@w3.org>
Received on Tuesday, 27 March 2007 14:01:32 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 8 January 2008 14:10:21 GMT