Re: Intent to implement: W3C WebAppSec credentialmanagement API

2016-03-13 Thread Martin Thomson
Now that is a frightening observation. Is this creating a more persistent (pernicious?) tracking mechanism? In that case, credentials stored by a site should last no longer than cookies. Credentials created by a user maybe can live longer. On 12 Mar 2016 04:41, "Anne van Kesteren" wrote: > On Fr

Re: Intent to implement: W3C WebAppSec credentialmanagement API

2016-03-13 Thread Martin Thomson
On 12 Mar 2016 7:28 PM, "Anne van Kesteren" wrote: > It should be identical to password manager integration. But it is not, though I suppose that a password manager might be exploited to store state. I hope that isn't possible... (note to self, attempt this attack) > > In that case, credentials

Re: On nsICancelableRunnable (or how bad decisions come back to haunt you)

2016-03-13 Thread Kyle Huey
On Fri, Mar 11, 2016 at 7:04 AM, Gabriele Svelto wrote: > Many moons ago, while we were frantically trying to make Firefox OS 1.0 > run half-decently, I introduced a derived class of nsIRunnable that > could be canceled: nsICancelableRunnable. As with many other things that > led to the first re

On nsICancelableRunnable (or how bad decisions come back to haunt you)

2016-03-13 Thread Gabriele Svelto
Many moons ago, while we were frantically trying to make Firefox OS 1.0 run half-decently, I introduced a derived class of nsIRunnable that could be canceled: nsICancelableRunnable. As with many other things that led to the first release of FxOS this was done in a rush and without much thinking. I