I'm not quite sure I understand why the answers to technical questions
about the security model is affected by strategic decisions about how to
move forward. I would have expected the dependency to go the other way
around.
I'm also not sure how you could be surprised by the WGs vote not to
replace years worth of work with a completely different and incompatible
proposal. Especially when any security concerns could have been
addressed by tweaks to the existing specification.
That said, I'm looking forward to your answers to our questions.
Best Regards,
Jonas Sicking
Sunava Dutta wrote:
Art,
I apologize for the delay but we're currently coming up with a plan moving
forward to regarding how we want to proceed with cross domain. Our timeframe
for responses to the questions below is tied to that plan. As you can imagine,
the Web API's support for XDR is something we believe would go a long way
towards securing cross domain. The current WG decision based on the survey will
cause us to re-strategize significantly.
Chris, out platform architect will get back soon with a response.
-----Original Message-----
From: Arthur Barstow [mailto:[EMAIL PROTECTED]
Sent: Friday, May 02, 2008 3:57 AM
To: Sunava Dutta; Eric Lawrence; Chris Wilson
Cc: ext Anne van Kesteren; Web API WG (public); [email protected];
Zhenbin Xu; Gideon Cohn; Sharath Udupa; Marc Silbey
Subject: Seeking XDR versus AC4CSR+XHR2 follow-ups by Microsoft [Was: Re: IE
Team's Proposal for Cross Site Requests]
Sunava,
Several of the active contributors of the AC spec and XHR{2} specs
have now asked you and your colleagues for follow-ups before a voice
conference.
Would you folks please follow the four UIRs Anne listed below and
provide feedback as requested?
-Regards, Art Barstow
On Apr 23, 2008, at 4:31 AM, ext Anne van Kesteren wrote:
On Wed, 23 Apr 2008 10:01:33 +0200, Anne van Kesteren
<[EMAIL PROTECTED]> wrote:
On Wed, 23 Apr 2008 04:26:39 +0200, Sunava Dutta
<[EMAIL PROTECTED]> wrote:
Thanks for the participation and comments.
I think this discussion is best continued in a telecon. I'm
working with Doug Schepers to see what we can schedule here.
Once again, thanks for sharing thoughts and providing feedback.
Wouldn't it be better if the IE Team first addressed the issues
raised so far with XDomainRequest in an e-mail? Getting this
information in a teleconference is not very convenient as minutes
are often of poor quality and teleconferences don't allow for
thinking arguments through and studying them.
I was told it would be good to point out some of those e-mails.
Here's a subset of the e-mails that as far as I can have not been
addressed by the IE Team:
http://lists.w3.org/Archives/Public/public-webapi/2008Mar/0211.html
http://lists.w3.org/Archives/Public/public-webapi/2008Mar/0212.html
http://lists.w3.org/Archives/Public/public-webapi/2008Apr/0125.html
http://lists.w3.org/Archives/Public/public-webapi/2008Apr/0056.html
--
Anne van Kesteren
<http://annevankesteren.nl/>
<http://www.opera.com/>
