Re: issue-151 from Rigo Wenning on 2013-09-02 (public-tracking@w3.org from September 2013)

From: Rigo Wenning <rigo@w3.org>
Date: Mon, 02 Sep 2013 16:11:25 +0200
To: public-tracking@w3.org
Cc: Mike O'Neill <michael.oneill@baycloud.com>, 'Chris Mejia' <chris.mejia@iab.net>
Message-ID: <2956948.aEkz5mevDP@hegel.sophia.w3.org>

Hi Mike, 

this is certainly interesting for web apps, but doesn't tell the 
receiver of the signal whether the signal was created following the 
rules. Everybody can just inject a header. We could have signed headers 
etc. So there is still lots to talk about. 

 --Rigo

On Monday 02 September 2013 09:58:00 Mike O'Neill wrote:
> Other W3C groups are working on cross-platform standards for web apps.
> Web apps need access to device interfaces for such things as
> telephony, geo-location and contact lists so "certified" apps are
> being defined which those that would have access to such "sensitive"
> APIs. A certified app is cryptographically signed by an organisation
> such as an app webstore to prove it has been vetted.

Received on Monday, 2 September 2013 14:11:55 UTC