Jonas Sicking schrieb:
Hence we have changed the plan to instead base trusted apps on a "packaged" solution.
It has taken me a while to get my feelings about this to a level where a reply wouldn't be outright rude.
That said, I still think that this basically makes those apps not be Open Web Apps at all but "not-of-the-web packaged apps that happen to use some web technologies". What's nice about that approach, of course, is that any APIs they are using that "normal" Open Web Apps cannot use do not need to be defined as open standards anyhow, as no of-the-web content can use them in any way anyhow. Of course, it makes our system be not too different from WebOS giving access to internals via completely proprietary APIs, but maybe that's OK when we can at least ship a system in a timely manner. But I'm probably drifting too far anyhow in those thoughts.
It's unfortunate that we didn't (yet) find a way to do this in a way that is more of-the-web. Also, needing to build up a fully package system including install, update and deinstall stories as well as in-package resource access, access of resources that is not only guarded by the usual web mechanisms including origins, all that is a major undertaking, I would have hoped we find an easier way to get things up and still be secure.
And there are a few side-stories to this, e.g. that a number of months ago we shot everyone down who was talking package management and said that we'd not care about that as it wouldn't be "the web" or that the difference in distribution between "normal" Open Web App and a "Trusted App" in terms of this proposal is so vast that it feels almost impossible for an app to cross that boundary at some stage (e.g. because it needs to access an API that needs higher privs, or because the only API it used from that set actually makes it into the set being available to others), this makes it questionable to me if those vastly different categories of apps can even be available from the same store.
Robert Kaiser _______________________________________________ dev-webapps mailing list [email protected] https://lists.mozilla.org/listinfo/dev-webapps
