Re: XBL2

2010-09-03 Thread Jon Ferraiolo
Ian, It's good news that you have re-opened the XBL2 effort. We still don't have a reasonable component model for HTML, and XBL1 has proven its value for 10 + years in the Mozilla world. My first question is how to deal with the chicken-and-egg problem where developers won't touch it until 95%

Re: [cors] unaddressed security concerns

2009-10-26 Thread Jon Ferraiolo
Hi Jonathan, I was one of the people who complained a long time ago about the dangers of sending cookies with cross-site requests, but the WG responded to my concerns and now I'm satisfied with the spec as it stands today. CORS requires servers to explicitly add a new HTTP header

Re: [Widgets] Widget Gallery RSS like sharing format

2009-03-13 Thread Jon Ferraiolo
To Jon Ferraiolo/Menlo Park/i...@ibmus 03/11/2009 10:16 cc AMSUZANNE Benoit RD-SIRP-ISS

Re: ACTION-315: Widget URI scheme thoughts

2009-02-26 Thread Jon Ferraiolo
My opinion is that having a widget URI scheme is not worth all of this complexity. I propose that the W3C ship Widgets 1.0 as quickly as possible with less flexibility on URI addressing. I think it is acceptable for a 1.0 release if all assets in the ZIP can only be addressed by relative

Re: [widgets] OAuth and openID

2009-02-22 Thread Jon Ferraiolo
Hi Marcos, I'll take a crack at this. OpenID is a technology that authenticates your identity. The cool thing about OpenID is that multiple web sites can share the same identity system, which makes it so that there can be a single mar...@myopenidwhatever.com instead of dozens of separate IDs for

Re: Required support for SVG in widgets

2009-02-04 Thread Jon Ferraiolo
The Web Apps WG should create yet another (short) widget spec, which would be an Open Web profile spec that simply provides a checklist for two interoperability levels for conformance. In both profiles, the user agent would be required to implement all of the various Widgets spec. One

Re: ISSUE-80: Runtime localization model for widgets [Widgets]

2009-02-04 Thread Jon Ferraiolo
I am all in favor of *not* having to replicate many files in the widget distribution just so you can create localized versions of a single image. One more thing I'll add. One of the URL techniques in the Widgets spec, using / as the first character in a relative address, works OK in widget

Re: Required support for SVG in widgets

2009-02-03 Thread Jon Ferraiolo
Hi Marcos, *IF* the WG decides to somehow promote SVG into a required format for some features in the widgets spec, then either the spec or implementations have to figure out how to deal with time-based behaviors (e.g., animations) and interactive behaviors (e.g., hyperlinks, onload, onclick,

Re: [widgets] Version string

2008-10-27 Thread Jon Ferraiolo
We came up with an approach at OpenAjax Alliance for version strings where the string must begin with N.N (or N.N.N or N.N.N.N) but can contain arbitrary alpha text after the number value. Then we defined how to do numeric comparisons between the leading numeric parts of two different version

Re: Opting in to cookies - proposal

2008-06-19 Thread Jon Ferraiolo
Maciej Stachowiak wrote: On Jun 14, 2008, at 4:23 AM, Jonas Sicking wrote: ...snip... I mean, I guess it's possible people will do this, but people could add Access-Control-Allow-Credentials site-wide too. And if we add Access-Control-Allow-Credentials-I-Really-Mean-It,