RE: Agenda and logistics...

Maciej Stachowiak wrote:
>I would like to request a separate block of time for discussion
>among those looking to implement or use XHR2+AC, so that we can
>come to rough consensus on the key remaining open issues.
>
>Since Microsoft has announced that they plan to stick with XDR >(<http://blogs.msdn.com/ie/archive/2008/06/23/securing-cross-site...
>-xmlhttprequest.aspx>), I assume they are not interested in being
>part of this consensus. But I still think we need to have this item
>on the agenda, and of course representatives from Microsoft are
>welcome to observe this discussion.

"Microsoft plans to stick with XDR" (and therefore assuming they are not interested in XHR2+AC discussion) is not an appropriate characterization, Maciej.  We have clearly stated we intend to ship XDR in IE8, yes.  We've also clearly stated that we intend to continue to participate in the XHR2+AC design, as we have some hope it can be improved to address our security concerns (as per my email on the subject to the public list, http://lists.w3.org/Archives/Public/public-webapi/2008May/0103.html: last para, "We will of course continue to participate in the Web API WG's work on cross-domain access, and I hope that work can be made secure to our satisfaction (and therefore implementable in IE); ").

>With XHR2+AC implementations in progress in the WebKit and Gecko
>engines, we need to make sure that we are on track to deliver a secure
>and interoperable solution in upcoming releases.

Indeed.

>Perhaps (given Microsoft's request) we
>can discuss Microsoft's feedback on Tuesday, XHR2+AC issues on
>Wednesday, and XHR1 issues on Thursday.

That would be ideal, from my perspective; I will not be attending on Thursday, as I'm heading out of town for the July 4 holiday.

-Chris

Received on Tuesday, 24 June 2008 17:46:59 UTC