Re: [whatwg] Proposal for a web application descriptor

2011-08-03 Thread Cameron Heavon-Jones
On 02/08/2011, at 11:50 PM, Ian Hickson wrote: On Wed, 27 Jul 2011, Cameron Heavon-Jones wrote: The mapping of tel and email inputs to a contacts list is functional, not systematic. Might this be extended for some other inputs: date(*), url, search etc? This functionality may be

Re: [whatwg] Proposal for a web application descriptor

2011-08-02 Thread Ian Hickson
On Wed, 27 Jul 2011, Mike Hanson wrote: On Jul 26, 2011, at 2:44 PM, Ian Hickson wrote: On Fri, 29 Apr 2011, Simon Heckmann wrote: I have read a lot in the last month about the future of html and web applications and I am very impressed by the progress this makes. However, I have

Re: [whatwg] Proposal for a web application descriptor

2011-07-27 Thread Cameron Heavon-Jones
On 26/07/2011, at 10:44 PM, Ian Hickson wrote: Robert O'Callahan posted a good response: http://weblogs.mozillazine.org/roc/archives/2011/06/permissions_for.html In short, the better solution isn't to ask for permissions up-front, but to ask for fewer permissions. The ideal solution is

Re: [whatwg] Proposal for a web application descriptor

2011-07-27 Thread Cameron Heavon-Jones
On 27/07/2011, at 5:30 PM, Mike Hanson wrote: The challenging use case, and one that we had trouble with when we prototyped the Contacts API, is for ongoing or persistent access. The best approach we have right now is to use explicit markup to sandbox the permissions grant away from

Re: [whatwg] Proposal for a web application descriptor

2011-07-26 Thread Ian Hickson
On Fri, 29 Apr 2011, Simon Heckmann wrote: I have read a lot in the last month about the future of html and web applications and I am very impressed by the progress this makes. However, I have come across some thing that annoys me: Permissions. I know they are important and I know they

Re: [whatwg] Proposal for a web application descriptor

2011-05-06 Thread Charles McCathieNevile
On Thu, 05 May 2011 21:41:24 +0200, Bjartur Thorlacius svartma...@gmail.com wrote: On 5/5/11, Charles McCathieNevile cha...@opera.com wrote: On Thu, 05 May 2011 00:12:06 +0200, Bjartur Thorlacius svartma...@gmail.com wrote: On 5/3/11, Cameron Heavon-Jones cmhjo...@gmail.com wrote: There

Re: [whatwg] Proposal for a web application descriptor

2011-05-06 Thread Bjartur Thorlacius
On 5/6/11, Charles McCathieNevile cha...@opera.com wrote: On Thu, 05 May 2011 21:41:24 +0200, Bjartur Thorlacius Of course, if the site requests coordinates, it's up to the user whether they come from /dev/gps or /dev/tty (or /n/3D Globe). Yeah, in principle. But given that most users aren't

Re: [whatwg] Proposal for a web application descriptor

2011-05-06 Thread Charles McCathieNevile
On Fri, 06 May 2011 14:54:55 +0200, Bjartur Thorlacius svartma...@gmail.com wrote: On 5/6/11, Charles McCathieNevile cha...@opera.com wrote: On Thu, 05 May 2011 21:41:24 +0200, Bjartur Thorlacius Of course, if the site requests coordinates, it's up to the user whether they come from

Re: [whatwg] Proposal for a web application descriptor

2011-05-06 Thread timeless
On Thu, May 5, 2011 at 6:08 PM, Charles McCathieNevile cha...@opera.com wrote: There is a Unite application for Opera that does this - http://unite.opera.com/application/701/ Wow! I'll install it on Sunday (my day ends in a few minutes) thanks you just made my weekend :)

Re: [whatwg] Proposal for a web application descriptor

2011-05-05 Thread Charles McCathieNevile
On Thu, 05 May 2011 00:12:06 +0200, Bjartur Thorlacius svartma...@gmail.com wrote: On 5/3/11, Cameron Heavon-Jones cmhjo...@gmail.com wrote: There are a number of resources which are thought of having an 'application' scope which may make sense to be collated into a single manifest and

Re: [whatwg] Proposal for a web application descriptor

2011-05-05 Thread timeless
On Thu, May 5, 2011 at 9:13 AM, Charles McCathieNevile cha...@opera.com wrote: If I understand correctly, I disagree. :) I might trust a given entity sometimes, or with some kinds of information, without wanting to simply say sure whatever you want. And I'm still haunted by web sites which

Re: [whatwg] Proposal for a web application descriptor

2011-05-05 Thread Cameron Heavon-Jones
On 04/05/2011, at 11:12 PM, Bjartur Thorlacius wrote: The quantity of permission requests can be managed in an effective manner by the agent allowing the user to store their preferences for the next command or as a universal setting. If you manage to inform users that they'd then be

Re: [whatwg] Proposal for a web application descriptor

2011-05-05 Thread Cameron Heavon-Jones
On 05/05/2011, at 7:13 AM, Charles McCathieNevile wrote: On Thu, 05 May 2011 00:12:06 +0200, Bjartur Thorlacius svartma...@gmail.com wrote: On 5/3/11, Cameron Heavon-Jones cmhjo...@gmail.com wrote: There are a number of resources which are thought of having an 'application' scope

Re: [whatwg] Proposal for a web application descriptor

2011-05-05 Thread Cameron Heavon-Jones
On 05/05/2011, at 8:30 AM, timeless wrote: On Thu, May 5, 2011 at 9:13 AM, Charles McCathieNevile cha...@opera.com wrote: In practice, even given something as simple as twitter's geolocation request I *sometimes* allow it to know where I am and sometimes don't. I'm hoping we'll

Re: [whatwg] Proposal for a web application descriptor

2011-05-05 Thread Charles McCathieNevile
On Thu, 05 May 2011 16:39:53 +0200, Cameron Heavon-Jones cmhjo...@gmail.com wrote: On 05/05/2011, at 8:30 AM, timeless wrote: On Thu, May 5, 2011 at 9:13 AM, Charles McCathieNevile cha...@opera.com wrote: In practice, even given something as simple as twitter's geolocation request I

Re: [whatwg] Proposal for a web application descriptor

2011-05-05 Thread Bjartur Thorlacius
On 5/5/11, Charles McCathieNevile cha...@opera.com wrote: On Thu, 05 May 2011 00:12:06 +0200, Bjartur Thorlacius svartma...@gmail.com wrote: On 5/3/11, Cameron Heavon-Jones cmhjo...@gmail.com wrote: There are a number of resources which are thought of having an 'application' scope which may

Re: [whatwg] Proposal for a web application descriptor

2011-05-04 Thread Bjartur Thorlacius
On 5/3/11, Cameron Heavon-Jones cmhjo...@gmail.com wrote: I would agree a command-level authorization is a better default, if only because it is necessary to have this level of granularity available. Agreed. The quantity of permission requests can be managed in an effective manner by the

Re: [whatwg] Proposal for a web application descriptor

2011-05-03 Thread Cameron Heavon-Jones
On 02/05/2011, at 10:47 AM, Henri Sivonen wrote: On Sat, 2011-04-30 at 09:52 -0400, Glenn Maynard wrote: Asking for specific permissions in the context of a user action is the only model that makes sense to me. When applications ask for a big bundle of permissions in advance, how can I as

Re: [whatwg] Proposal for a web application descriptor

2011-05-02 Thread Henri Sivonen
On Sat, 2011-04-30 at 09:52 -0400, Glenn Maynard wrote: Asking for specific permissions in the context of a user action is the only model that makes sense to me. When applications ask for a big bundle of permissions in advance, how can I as a user know what to do? I'm sure to get

Re: [whatwg] Proposal for a web application descriptor

2011-05-01 Thread Simon Heckmann
Hello everyone, After reading all your comments I partly re-tought some of my ideas. First of all it might not be the best idea to create a full application descriptor if it would only be used to specify permissions. Additionally, I can see why people do not want to be asked for all

Re: [whatwg] Proposal for a web application descriptor

2011-05-01 Thread Göran Eriksson AP
Hi Simon, Just to be certain, I'd like to ask if You are targeting desktop browser in mobile devices, such as iPad and iPhones, as well, or is Your proposal focused on PC/laptop devices? Kind Regards Göran On 2011-05-01 16.49, Simon Heckmann si...@simonheckmann.de wrote: Hello everyone,

Re: [whatwg] Proposal for a web application descriptor

2011-04-30 Thread Simon Heckmann
Am 30.04.2011 um 01:41 schrieb Glenn Maynard gl...@zewt.org: On Fri, Apr 29, 2011 at 6:40 PM, Simon Heckmann si...@simonheckmann.dewrote: Some challenges include: * how to justify the request to the user being asked to grant the privileges starting with a text string and a link to

Re: [whatwg] Proposal for a web application descriptor

2011-04-30 Thread Robert O'Callahan
On Sat, Apr 30, 2011 at 11:41 AM, Glenn Maynard gl...@zewt.org wrote: This is why--in general--I like the model so far: the user is asked for permission in response to actually doing something that uses a feature. In the notepad app, you're asked for permission to access the internet when

Re: [whatwg] Proposal for a web application descriptor

2011-04-30 Thread Glenn Maynard
On Sat, Apr 30, 2011 at 3:30 AM, Simon Heckmann si...@simonheckmann.dewrote: I agree: That is why the example you quote from my previous mail went on like this: As the users continue to use the page, the web site could check the status of the permission using javascript and remind the user to

Re: [whatwg] Proposal for a web application descriptor

2011-04-30 Thread Robert O'Callahan
On Sun, May 1, 2011 at 1:52 AM, Glenn Maynard gl...@zewt.org wrote: On Sat, Apr 30, 2011 at 5:23 AM, Robert O'Callahan rob...@ocallahan.org wrote: The application could have a settings page with a checkbox Enable desktop notifications. When you click on that box, the browser shows its

[whatwg] Proposal for a web application descriptor

2011-04-29 Thread Simon Heckmann
Hello everyone, I have read a lot in the last month about the future of html and web applications and I am very impressed by the progress this makes. However, I have come across some thing that annoys me: Permissions. I know they are important and I know they are needed but currently I find

Re: [whatwg] Proposal for a web application descriptor

2011-04-29 Thread Benjamin Hawkes-Lewis
On Fri, Apr 29, 2011 at 9:39 AM, Simon Heckmann si...@simonheckmann.de wrote: I have written a short document covering my proposal: www.simonheckmann.de/download/Proposal.pdf (3 pages, ~200KB) I can't open this PDF in Preview. -- Benjamin Hawkes-Lewis

Re: [whatwg] Proposal for a web application descriptor

2011-04-29 Thread Simon Heckmann
Fixed! Am 29.04.2011 um 10:52 schrieb Benjamin Hawkes-Lewis: On Fri, Apr 29, 2011 at 9:39 AM, Simon Heckmann si...@simonheckmann.de wrote: I have written a short document covering my proposal: www.simonheckmann.de/download/Proposal.pdf (3 pages, ~200KB) I can't open this PDF in Preview.

Re: [whatwg] Proposal for a web application descriptor

2011-04-29 Thread Simon Heckmann
Hello again, As requested I updated the proposal to contain screenshots from English browser versions now. You can always find the latest version on http://www.simonheckmann.de/download/Proposal.pdf. Additionally, I created an HTML version of the file which might come in handy for some

Re: [whatwg] Proposal for a web application descriptor

2011-04-29 Thread Dave Raggett
You may also want to look at the ideas being floated by Mozilla and others for installed web apps to request extra privileges. This is expected to lead to a new W3C Working Group within a few months from now, and I am hoping to see progress on being able to run the browser in a locked down

Re: [whatwg] Proposal for a web application descriptor

2011-04-29 Thread Simon Heckmann
Am 29.04.2011 um 16:47 schrieb Dave Raggett: You may also want to look at the ideas being floated by Mozilla and others for installed web apps to request extra privileges. This is expected to lead to a new W3C Working Group within a few months from now, and I am hoping to see progress on

Re: [whatwg] Proposal for a web application descriptor

2011-04-29 Thread Glenn Maynard
On Fri, Apr 29, 2011 at 6:40 PM, Simon Heckmann si...@simonheckmann.dewrote: Some challenges include: * how to justify the request to the user being asked to grant the privileges starting with a text string and a link to more information Well, this is what I thought of: The users