- From: Craig Francis <craig.francis@gmail.com>
- Date: Thu, 14 Jan 2016 11:07:32 +0000
- To: Ivan Herman <ivan@w3.org>
- Cc: W3C Digital Publishing IG <public-digipub-ig@w3.org>
Thanks Ivan, You are right, I normally focus more on security side of things. But out of interest, EPUB3, is that likely to get the same integration as how PDFs work at the moment? As in, you can email someone an EPUB3 file, and the recipient can click/tap on it to quickly view in their email client? Or simply have the web browser open it, rather than needing a dedicated EPUB3 reader? So far I've really only considered EPUB as more of a format for books (which is probably my lack of understanding of the format), so I've never really thought of its use for reports, leaflets, etc (i.e. things that PDF's tend to be used for). In the mean time I'll have a read up on the PWP group. Craig > On 14 Jan 2016, at 10:52, Ivan Herman <ivan@w3.org> wrote: > > Craig, > > thanks for your note. Two comments: > > - The format EPUB3, defined by IDPF, already does many of what you say. On a very high level, it takes a (slightly constrained) Web site and puts it into, essentially, a zip file. For many applications, this is a worthy replacement for PDF. Note that almost all the electronic books you buy today are in EPUB3 or its predecessor... > > - The DPUB IG also looks further down the line on a stronger integration of digital publishing and the OWP: > > http://www.w3.org/TR/pwp > > which may lead to significant changes in the future. > > Bottom line: this evolution is already happening! > > I understand you come more from the security area; there may be security issues with EPUB3 or PWP which we do not fully appreciate, so any comment is welcome of course! > > Cheers > > Ivan > > >> On 14 Jan 2016, at 11:34, Craig Francis <craig@craigfrancis.co.uk> wrote: >> >> Hi, >> >> Recently I've been thinking of some of the problems with PDF's, which are useful for creating a document that can be archived, emailed, printed, etc. >> >> HTML has solutions for many of PDF's problems though, for example structured text (accessibility), ability to change layout depending on screen size (no need for small screen devices to zoom into a fixed A4 layout), can change font size, better indexing support (searching for documents), etc. >> >> Unfortunately you can't just email a HTML document to someone, as this causes a range of security problems, and including resources can be difficult (you can inline them, or use MHTML, but these are tricky to create). >> >> So I was wondering if we could take the approach that Microsoft Word did with the docx format, Java with JAR, PHP with PHAR, etc... >> >> Have a new file format, associated with the browser, which is just a ZIP/GZIP file that contains an index.html file, and everything else needed for the document. >> >> Then from a security point of view, it can be locked down to its own little box, so no access to other files on the file system, probably no access to cookies/localstorage, no ability to connect to another host. >> >> And from the users point of view, the document could be protected with a password (a feature that ZIP/GZIP provides already, and the browser can prompt for when opening). >> >> So would this help with the security aspects of emailing HTML files to people (e.g. reports), and be better than PDFs? >> >> Craig >> >> --- >> >> https://lists.w3.org/Archives/Public/public-webappsec/2016Jan/0063.html >> >> https://code.google.com/p/chromium/issues/detail?id=575677 >> >> https://bugzilla.mozilla.org/show_bug.cgi?id=1237990 >> >> https://wpdev.uservoice.com/forums/257854-microsoft-edge-developer/suggestions/11443002-webpage-zip-as-alternative-to-pdf >> >> > > > ---- > Ivan Herman, W3C > Digital Publishing Lead > Home: http://www.w3.org/People/Ivan/ > mobile: +31-641044153 > ORCID ID: http://orcid.org/0000-0003-0782-2704 > > > >
Received on Thursday, 14 January 2016 11:08:01 UTC