Re: Proposal for a web application descriptor

Am 02.05.2011 um 10:28 schrieb Charles McCathieNevile:

> On Mon, 02 May 2011 10:04:58 +0200, Simon Heckmann <simon@simonheckmann.de> wrote:
> 
>> There is a new version of the proposal out: http://www.simonheckmann.de/proposal/draft2
> 
> You're thinking along very similar lines to the way we are thinking inside Opera about this problem, in terms of UI.
> 
> However, I'm not so sure about having an object that authors can interact with for permissions. While the positive side is always good, letting malicious authors into this is known to be a major problem.
> 

I though exactly the same: We would give the site a possibility to write to the UI of the browser. But I really like the benefit we get because the users know why they are granting each permission. The length of text could be limited and special characters could be stripped from the text. Maybe this way the mischief could be stemmed. If that is not what you mean, please elaborate your thoughts a little bit more.

> Have you seen the work done by the Web Security Context group? http://www.w3.org/TR/wsc-ui/
> 
> cheers
> 
> Chaals
> 
>> Am 29.04.2011 um 15:33 schrieb Simon Heckmann:
>> 
>>> Hello everyone,
>>> 
>>> I have read a lot in the last month about the future of html and web applications and I am very impressed by the progress this makes. However, I have come across some thing that annoys me: Permissions. I know they are important and I know they are needed but currently I find this quite inconvenient. And with more and more permissions coming up this might get worse so I spent some time thinking about it.
>>> 
>>> I have written a short document covering my proposal: www.simonheckmann.de/download/Proposal.pdf (PDF, 3 pages, ~200KB) or www.simonheckmann.de/proposal/ (HTML version).
>>> 
>>> It should just take only a few minutes to read and includes examples and screenshots. I am really looking forward to hearing your thoughts on this. Please feel free to share this idea with whomever you want to. If you think I should post this proposal somewhere else please say so.
>>> 
>>> Kind regards,
>>> Simon Heckmann
>> 
> 
> 
> -- 
> Charles McCathieNevile  Opera Software, Standards Group
>    je parle français -- hablo español -- jeg lærer norsk
> http://my.opera.com/chaals       Try Opera: http://www.opera.com