Re: [coord] Is there still a need for WebApps + SysApps meeting at TPAC?

On 2013-10-31 16:04, Nilsson, Claes1 wrote:
> I want to say that we are interested in implementing the JSON manifest and also to discuss additions to the manifest. Content security policies have already been mentioned and we are looking at something similar to http://developer.chrome.com/extensions/contentSecurityPolicy.html, which allows inclusion of content security policies to support secure hosted apps by defining schemes (https:) that are allowed to use for whitelisting secure origins from which scripts should be accepted.

http://developer.chrome.com/extensions/manifest.html

The definition of the signature seems to be missing here.
If JSON still is the choice, JWS (http://tools.ietf.org/html/draft-ietf-jose-json-web-signature-17) or JCS (https://openkeystore.googlecode.com/svn/resources/trunk/docs/JSON-Clear-Text-Signature-Scheme.pdf) are the two hottest candidates.

Cheers
Anders

> 
> I would also like to better understand what a meta tag solution would mean.
> 
> However, as the manifest specification editor Marcos unfortunately is not able to participate in TPAC I am not sure on the most efficient way to discuss the manifest, a joint SysApps-WebApps session with Marcos calling in or a mailing list discussion.
> 
> My main point is to stress our interest in the manifest specification and additions to it.
> 
> BR
>   Claes
> 
>> -----Original Message-----
>> From: Marcos Caceres [mailto:w3c@marcosc.com]
>> Sent: den 31 oktober 2013 15:20
>> To: Arthur Barstow
>> Cc: public-webapps; public-sysapps@w3.org
>> Subject: Re: [coord] Is there still a need for WebApps + SysApps
>> meeting at TPAC?
>>
>> On Thursday, October 31, 2013 at 12:51 PM, Arthur Barstow wrote:
>>> [ My apologies in advance for cross-posting but I think it's needed
>>> for this coordination topic. ]
>>>
>>> Hi All,
>>>
>>> Last June, the Chairs of WebApps and SysApps agreed to allocate a
>> time
>>> slot @ TPAC Shenzhen for a joint meeting from 16:00-17:00 on Monday
>>> November 11 [1].
>>>
>>> The one topic currently identified for that slot is the Manifest spec.
>>>
>>> Marcos - would you please summarize the overall `state` of the
>>> Manifest spec (f.ex. the status, next steps, blockers, and such)? I
>>> would also like to know if you think there are some related issues
>>> that could potentially benefit from some meeting time, or if we can
>>> use the list server instead.
>>
>>
>> I’m trying to figure out (or get agreement amongst those interested in
>> implementing) if we should have a JSON manifest or go with the meta tag
>> solution (or both) - this is a blocker. Current steps are for me to
>> investigate the solutions and usage on teh Webs.
>>
>> No significant work has been done on the spec since it moved over to
>> WebApps.
>>
>> I don’t mind if we do it on the list. But if others want me to dial in
>> to discuss, I’m ok to do that.
>>
>>> All - are there any other topics to discuss?
>>>
>>
>>
>> Not from me.
>>
>> --
>> Marcos Caceres
>>
>>
>>
>

Received on Thursday, 31 October 2013 15:17:41 UTC