Hosted apps, was Re: Clarity over direction of work on runtime and security model?

Hi Claes,  


On Wednesday, September 18, 2013 at 10:27 AM, Nilsson, Claes1 wrote:

> In addition I would like to stress that Sony considers support for hosted, i.e. not only packaged, system apps in a secure manner very prioritized.

With regards to hosted apps, I do too -  we need to solve security at a platform or API level. I'm not convinced that putting something in a JSON file realistically addresses any problems (not without a centralized point of signing and distribution … maybe fine for packaged apps, not for hosted apps) - if we ever want to see these APIs in the Web Platform proper (or anything that remotely looks like a hosted app), then there is no other choice but to find some way to address how access to privileged APIs can be achieved.  

I'm hopeful that we can do away with the idea of a "hosted app". That is to say, we should not need to define a new tear of application to enable more sophisticated forms of what is essentially just fancy bookmarking: this doesn't mean doing away with the manifest or installation API. It just means not creating artificial boundaries between HTML documents. It's clear and undeniable that everyone wants to be able to "put web pages on the home screen" or "install a web app". But we need to really look closely at what we need to enable that functionality (and what bits we already have in place in HTML to do that - and if other implementers will be supportive of it).  

Anyway, this is something that we need to discuss over at the WebApps WG.  

Kind regards,
Marcos  

Received on Thursday, 26 September 2013 10:06:49 UTC