I agree.

This also seems like it’s something that could be implemented by a client 
application using our JS object extension hooks without touching WebKit at all.

- Anders

On Sep 6, 2013, at 10:30 AM, Simon Fraser <simon.fra...@apple.com> wrote:

> Perhaps before we spend any more time discussing the security implications of 
> Network Service Discovery, we should decide whether it fits with the goals of 
> the WebKit project:
> 
> https://www.webkit.org/projects/goals.html
> 
> It’s not at all clear to me that it does.
> 
> Simon
> 
> On Sep 6, 2013, at 9:59 AM, Oliver Hunt <oli...@apple.com> wrote:
> 
>> 
>> On Sep 6, 2013, at 9:44 AM, youenn fablet <youe...@gmail.com> wrote:
>> 
>>> Hi Ryosuke,
>>> 
>>> The two points you are mentioning make sense to me.
>>>  
>>> 
>>> For starters, most of users wouldn't even know what a local network is; let 
>>> alone what discovering media sources, etc... mean.
>>> 
>>> Most users may not be able to understand what means “discover local network 
>>> DACP servers”.
>>> But if a user is requested to grant/deny access to “Bob music library” 
>>> service (the service being a DACP server), the situation seems getting 
>>> better.
>>> The spec is a work in progress and may be improved.
>> 
>> For the sake of argument let's say this "discovery" is allowed to occur.  
>> How do you talk to "Bob music library" without the web page sending raw data 
>> to/from the DACP server?
>> 
>> --Oliver
>> _______________________________________________
>> webkit-dev mailing list
>> webkit-dev@lists.webkit.org
>> https://lists.webkit.org/mailman/listinfo/webkit-dev
> 
> _______________________________________________
> webkit-dev mailing list
> webkit-dev@lists.webkit.org
> https://lists.webkit.org/mailman/listinfo/webkit-dev

_______________________________________________
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Reply via email to