W3C home > Mailing lists > Public > public-webapi@w3.org > May 2008

Re: Seeking XDR versus AC4CSR+XHR2 follow-ups by Microsoft [Was: Re: IE Team's Proposal for Cross Site Requests]

From: Jonas Sicking <jonas@sicking.cc>
Date: Fri, 02 May 2008 16:02:54 -0700
Message-ID: <481B9D9E.6090109@sicking.cc>
To: Sunava Dutta <sunavad@windows.microsoft.com>
CC: Arthur Barstow <art.barstow@nokia.com>, Eric Lawrence <ericlaw@exchange.microsoft.com>, Chris Wilson <Chris.Wilson@microsoft.com>, ext Anne van Kesteren <annevk@opera.com>, "Web API WG (public)" <public-webapi@w3.org>, "public-appformats@w3.org" <public-appformats@w3.org>, Zhenbin Xu <zhenbinx@windows.microsoft.com>, Gideon Cohn <gidco@windows.microsoft.com>, Sharath Udupa <Sharath.Udupa@microsoft.com>, Marc Silbey <marcsil@windows.microsoft.com>

I'm not quite sure I understand why the answers to technical questions 
about the security model is affected by strategic decisions about how to 
move forward. I would have expected the dependency to go the other way 
around.

I'm also not sure how you could be surprised by the WGs vote not to 
replace years worth of work with a completely different and incompatible 
proposal. Especially when any security concerns could have been 
addressed by tweaks to the existing specification.

That said, I'm looking forward to your answers to our questions.

Best Regards,
Jonas Sicking

Sunava Dutta wrote:
> Art,
> I apologize for the delay but we're currently coming up with a plan moving forward to regarding how we want to proceed with cross domain. Our timeframe for responses to the questions below is tied to that plan. As you can imagine, the Web API's support for XDR is something we believe would go a long way towards securing cross domain. The current WG decision based on the survey will cause us to re-strategize significantly.
> Chris, out platform architect will get back soon with a response.
> 
> 
> -----Original Message-----
> From: Arthur Barstow [mailto:art.barstow@nokia.com]
> Sent: Friday, May 02, 2008 3:57 AM
> To: Sunava Dutta; Eric Lawrence; Chris Wilson
> Cc: ext Anne van Kesteren; Web API WG (public); public-appformats@w3.org; Zhenbin Xu; Gideon Cohn; Sharath Udupa; Marc Silbey
> Subject: Seeking XDR versus AC4CSR+XHR2 follow-ups by Microsoft [Was: Re: IE Team's Proposal for Cross Site Requests]
> 
> Sunava,
> 
> Several of the active contributors of the AC spec and XHR{2} specs
> have now asked you and your colleagues for follow-ups before a voice
> conference.
> 
> Would you folks please follow the four UIRs Anne listed below and
> provide feedback as requested?
> 
> -Regards, Art Barstow
> 
> 
> On Apr 23, 2008, at 4:31 AM, ext Anne van Kesteren wrote:
> 
>> On Wed, 23 Apr 2008 10:01:33 +0200, Anne van Kesteren
>> <annevk@opera.com> wrote:
>>> On Wed, 23 Apr 2008 04:26:39 +0200, Sunava Dutta
>>> <sunavad@windows.microsoft.com> wrote:
>>>> Thanks for the participation and comments.
>>>> I think this discussion is best continued in a telecon. I'm
>>>> working with Doug Schepers to see what we can schedule here.
>>>> Once again, thanks for sharing thoughts and providing feedback.
>>> Wouldn't it be better if the IE Team first addressed the issues
>>> raised so far with XDomainRequest in an e-mail? Getting this
>>> information in a teleconference is not very convenient as minutes
>>> are often of poor quality and teleconferences don't allow for
>>> thinking arguments through and studying them.
>> I was told it would be good to point out some of those e-mails.
>> Here's a subset of the e-mails that as far as I can have not been
>> addressed by the IE Team:
>>
>>   http://lists.w3.org/Archives/Public/public-webapi/2008Mar/0211.html
>>   http://lists.w3.org/Archives/Public/public-webapi/2008Mar/0212.html
>>   http://lists.w3.org/Archives/Public/public-webapi/2008Apr/0125.html
>>   http://lists.w3.org/Archives/Public/public-webapi/2008Apr/0056.html
>>
>>
>> --
>> Anne van Kesteren
>> <http://annevankesteren.nl/>
>> <http://www.opera.com/>
>>
> 
> 
> 
Received on Friday, 2 May 2008 23:04:32 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 2 May 2008 23:04:34 GMT