- From: Bjoern Hoehrmann <derhoermi@gmx.net>
- Date: Tue, 11 May 2010 02:48:10 +0200
- To: nathan@webr3.org
- Cc: public-webapps <public-webapps@w3.org>
* Nathan wrote: >Personally, I don't follow why JS running in a user agent should have >completely different access rules to the rest of the web, primarily >because a few site admin's feel it's a good idea to expose sensitive >data via IP-based auth on intranets / on the web via stateful sessions >on a stateless protocol. If you do not depend on a user's special standing with a third party site, you can configure your server as proxy between your user and the third party site. That's more difficult for you, but easier for users and maintainers of third party sites. If we'd do away with the access restriction, it'd be easier for you, and more difficult for users and third parties. What we have now is largely due to following the path of least resistance (which is probably true for most web technology). -- Björn Höhrmann · mailto:bjoern@hoehrmann.de · http://bjoern.hoehrmann.de Am Badedeich 7 · Telefon: +49(0)160/4415681 · http://www.bjoernsworld.de 25899 Dagebüll · PGP Pub. KeyID: 0xA4357E78 · http://www.websitedev.de/
Received on Tuesday, 11 May 2010 00:48:33 UTC