Re: [Web-SIG] Developer authentication spec

2009-07-14 Thread William Dode
On 13-07-2009, Graham Dumpleton wrote: > 2009/7/14 Ian Bicking : >> I wrote up a spec a while >> ago: http://wsgi.org/wsgi/Specifications/developer_auth >> The goal is a single way to indicate to debugging and developer tools when >> the developer is logged in.  This is orthogonal to normal applica

Re: [Web-SIG] Developer authentication spec

2009-07-13 Thread Graham Dumpleton
2009/7/14 Ian Bicking : > I wrote up a spec a while > ago: http://wsgi.org/wsgi/Specifications/developer_auth > The goal is a single way to indicate to debugging and developer tools when > the developer is logged in.  This is orthogonal to normal application > authentication.  It would control acce

Re: [Web-SIG] Developer authentication spec

2009-07-13 Thread Aaron Watters
I like the general idea of a dev-auth spec. Of course as you know developer mode is extremely dangerous. I would prefer that the spec made getting into developer mode more difficult so that people who don't know what they are doing have to jump through a couple hoops before they hang themselves.

[Web-SIG] Developer authentication spec

2009-07-13 Thread Ian Bicking
I wrote up a spec a while ago: http://wsgi.org/wsgi/Specifications/developer_auth The goal is a single way to indicate to debugging and developer tools when the developer is logged in. This is orthogonal to normal application authentication. It would control access to things like interactive debu