W3C home > Mailing lists > Public > public-webappsec@w3.org > March 2015

Re: Charter Addition Proposal: "Trusted Code" for the Web

From: <chaals@yandex-team.ru>
Date: Mon, 23 Mar 2015 20:49:43 +0100
To: Anders Rundgren <anders.rundgren.net@gmail.com>, Jeffrey Yasskin <jyasskin@google.com>, Marijn Kruisselbrink <mek@chromium.org>
Cc: "public-webappsec@w3.org" <public-webappsec@w3.org>
Message-Id: <108261427140183@webcorp02e.yandex-team.ru>
23.03.2015, 20:32, "Anders Rundgren" <anders.rundgren.net@gmail.com>:
> On 2015-03-23 19:49, chaals@yandex-team.ru wrote:
>>  OK, it seems I have so far failed to understand what you are really trying to achieve,
>>  so let me try again…
>
> NP.
>>  23.03.2015, 19:43, "Anders Rundgren" <anders.rundgren.net@gmail.com>:
>>>  On 2015-03-23 19:18, Jeffrey Yasskin wrote:
>>>
>>>  Hi Jeffrey,
>>>>    Am I right in thinking that your proposal isn't about how to declare a
>>>>    web-delivered piece of code as "trusted", but rather about defining
>>>>    how to communicate between (untrusted) web code and (trusted) native
>>>>    code delivered with the hardware or browser?
>>>  Close.  In my take on this, trusted code is supplied in native level applications
>>>  that have been specifically vetted for this usage.
>>  Where there is a trusted application installed on a device, you want a web application
>>  to be able to pass information to that app, and get it back?
>
> Yes, that is the core and is what hundreds of different applications already do,
> albeit using non-standard methods.

Whee! I think I understand the rough problem, at least…

> If we take a subject you are involved in, Web Payments, a local wallet would be an
> excellent target application.

Sure. Some other possibilities to check I have roughly the right idea:

One is a graphics application I happen to have bought might be what I want to use for editing my photos on Yandex disk, instead of the built-in online editor.

One of the things that drives me nuts about online document editors is having them fall over when I am offline. I would rather be able to use an installed document editor, and pass edited documents, or changesets, back. Github

> Hopefully the referred web2native bridge presentation is also worth a brief peek.

I already looked at it and didn't see what I was missing… but I think I'm getting there now.

cheers

--
Charles McCathie Nevile - web standards - CTO Office, Yandex
chaals@yandex-team.ru - - - Find more at http://yandex.com
Received on Monday, 23 March 2015 19:50:17 UTC

This archive was generated by hypermail 2.3.1 : Monday, 23 October 2017 14:54:11 UTC