On Wed, Feb 18, 2015 at 3:51 AM, Anne van Kesteren <[email protected]> wrote:
> Trying to figure out how to get sockets and "systemXHR" into the
> browser has been going on for a very long time now, I think we should
> start embracing that it's unlikely to happen and look elsewhere.

The "look elsewhere" will be native platforms. While these discussions
may have been going on for a while, hopefully the new bit of
information is that these sorts of capabilities really are useful to
have as shown in FirefoxOS and native platform offerings. Plus, I
really do not think we should be encouraging people to run proxy
servers to open them up to government and hacking hazards.

Hopefully what can be revisited is the frame of mind around these APIs
from a web perspective.

Mobile use is really large. Native mobile apps do not have
restrictions from these APIs. If web sites are concerned about getting
cross domain hits, they can get them now from native apps.

We definitely need to be careful, making sure we do not pass things
like cookies for these types of requests, and to also allow for
services to explicitly indicate they do not want to allow these types
of connections, but what has been suggested instead of using these
types of APIs does not seem better.

James
_______________________________________________
dev-b2g mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-b2g

Reply via email to