Re: Seeking Feedback on Capability URLs Draft

On Fri, May 23, 2014 at 4:58 PM, John Kemp <john@jkemp.net> wrote:
> I've previously thought about commenting on this document, but stopped
> myself, mostly because I think the document strikes the wrong tone for me;
> why does the foremost architectural body on the Web seem so against the use
> of capability URLS, when (albeit in my opinion) they seem so much better
> aligned with Web architecture than ACL/password approaches?

Well, unless you're careful, they leak like crazy. E.g. if you include
jQuery from Google's CDN, Google will know all your secrets. It's
certainly a great idea, but the web needs new features in order to
make it work (or sites need to use a lot of hacks, to the detriment of
some of the other features of the web).


-- 
http://annevankesteren.nl/

Received on Sunday, 1 June 2014 09:56:36 UTC