On 2015-04-01 16:11, Anne van Kesteren wrote:
On Wed, Apr 1, 2015 at 3:58 PM, Nilsson, Claes1
However, work is ongoing in the Web App Sec WG that may provide basis
for a security model for this API. Please read section 4,
I don't see anything there that makes TCP or UDP possible. It has
# Explicit trust for the requesting webapp based on the security
# system of the web runtime this API is implemented in.
but no such thing exists (standardized).
Even if there was a technical standard for the web runtime, the distribution
of secure applications would probably not be standard which is why I continue
jumping up and down pointing in another direction which is based on COMBINING
the Open Web
with local, more or less proprietary applications which would do the "dirty
(like they already do today).
Unfortunately it seems that the browser vendors want to lock down everything
Web developers in a very disadvantaged position compared to their
Regarding permissions involving the user, there are huge limitations in the