Re: [sysapps/runtime] cross origin XHR in packaged apps

On 02/04/2013 13:30 , Dave Raggett wrote:
> I would like to hear more about the issues around using signing.

I don't want to cast undue aspersions as to various ways in which 
signing may be used in SysApps.

It's just that as a developer, my experience with anything that has 
required signing (and for which I've been in the loop, as opposed to it 
happening under the hood somewhere) has been nothing short of appalling.

As a result, when someone mentions signing, it's not so much that I 
start shooting immediately. But I certainly angle my chair so as to 
slightly draw open the curtains that normally hide the Angry Developer 
Gun Rack behind me.

It might be that it's mostly been a tooling issue. Signing is not 
something you would normally do by hand, so it's always tool-leveraged. 
It's therefore possible that my experience (and, I'm sure, that of 
others) stems from the tools being terrible; and it might therefore be 
possible to have non-horrible tools for this.

Switching from developer to standardista hat, my experience has also 
been that there is a class of issues for which people just immediately 
say "Yay, let's use signatures!!!!"

So I'm just being wary. I understand that signing might be required in 
places, but I am leery of making it required unless we're really, really 
sure there is no alternative.

-- 
Robin Berjon - http://berjon.com/ - @robinberjon

Received on Tuesday, 2 April 2013 15:47:06 UTC