However - on a side note - the current version of Apollo doesn't require one at all! :D I developed an entire component utilizing data from an external site without a crossdomain.xml file. It worked great until I published it and tried using it on my server/website. Then I converted my app over to apollo using the same component and it worked fine!
--- In [email protected], "Alex Harui" <[EMAIL PROTECTED]> wrote: > > Geez, I'd have to go through the whitepaper again, but if you're running > on a local box via the file system instead of HTTP you are not in a > REMOTE sandbox and the rules are different. If you set up a local > server and fetch the app via http, you should see it fail to make the > calls. > > -Alex > > ________________________________ > > From: [email protected] [mailto:[EMAIL PROTECTED] On > Behalf Of Mike Vargo > Sent: Friday, May 11, 2007 2:16 PM > To: [email protected] > Subject: [flexcoders] I dont need a crossdomain.xml? > > > > I've written a few sample apps. One that uses WebService and one that > uses HTTPService. > > - My app is running on my local box. > - The WebService makes a request to say www.somewhere.com. > - The HTTPServicemakes a request to say www.anotherdomain.com. > > Both requests work without a crossdomain.xml file on www.somewhere.com > or www.anotherdomain.com. > > Am I not understanding correctly how the security model works? My > understanding is that these 2 calls should not work. > > - Mike >

