Re: Intent to implement: Web2Native Bridge

2016-12-09 Thread Anders Rundgren
The Web2Native Bridge emulator now runs flawlessly on the "desktop" version of Firefox! I'm still awaiting publishing by Mozilla AddOn team. You may install temporary right now though: https://github.com/cyberphone/web2native-bridge/tree/master/firefox/extension Installation of the host app: ht

Re: Intent to implement: Web2Native Bridge

2016-12-01 Thread Anders Rundgren
On Thursday, December 1, 2016 at 9:51:36 PM UTC+1, Nicholas Alexander wrote: Hi Nicholas, I want to avoid a long (and for other people boring) debate, but I feel that I must at least *try* to describe what this is all about... I would recommend a peek in this document which describes the ratio

Re: Intent to implement: Web2Native Bridge

2016-12-01 Thread Nicholas Alexander
On Wed, Nov 30, 2016 at 2:40 AM, Anders Rundgren < anders.rundgren@gmail.com> wrote: > On Tuesday, November 29, 2016 at 10:01:38 PM UTC+1, Nicholas Alexander > wrote: > Hi Nick, > Many thanks for your elaborate comments! > Heh, that message kept growing and probably could be a blog post when

Re: Intent to implement: Web2Native Bridge

2016-11-30 Thread Anders Rundgren
I believe both the Android Intent solution and the Google/Mozilla/Microsoft take on native messaging are vulnerable to phishing attacks which has bearing on authentication solutions. That is, the unavailability of a security context to the called application represents a problem including the p

Re: Intent to implement: Web2Native Bridge

2016-11-30 Thread Anders Rundgren
On Tuesday, November 29, 2016 at 10:01:38 PM UTC+1, Nicholas Alexander wrote: Hi Nick, Many thanks for your elaborate comments! If we begin with security, Android already allows Web-sites to invoke apps which they have no specific relation to using the custom URI scheme. I don't see that the ab

Re: Intent to implement: Web2Native Bridge

2016-11-29 Thread Nicholas Alexander
Hi Anders, On Tue, Nov 29, 2016 at 9:10 AM, Anders Rundgren < anders.rundgren@gmail.com> wrote: > There are virtually tons of developers out there using Android Intents to > start "Apps" from the Web. > Aye, and Firefox does support this custom URI scheme. > However, this mechanism sucks b

Intent to implement: Web2Native Bridge

2016-11-29 Thread Anders Rundgren
There are virtually tons of developers out there using Android Intents to start "Apps" from the Web. However, this mechanism sucks big-time since: 1. It leaves the invoking Web page in an "orphaned" state 2. There's no way to "talk back" to the invoked Web page 3. There's no Web page security con