Re: [whatwg] Accessing local files with JavaScript portably and securely

2017-04-20 Thread Jeffrey Yasskin
On Sat, Apr 15, 2017 at 6:09 AM, Philipp Serafin  wrote:

> If I see this correctly, we're currently talking about two different
> use-cases for file/directory access:
>
> 1) …
>
> 2) Loading (parts of) the app itself from a local filesystem, possibly
> without any network access being available at all (the CD rom example).
>
> Maybe the security would be easier to handle if dealt with both use-cases
> separately. I think both use-cases have different requirements,
> non-requirements and "prior art":
>
> 1) …
>
> 2) sounds like an extension of offline apps to me. Maybe this could be
> solved by defining some kind of package format for service workers and
> cached resources, so service workers can be installed without any network
> access.
>

FWIW, we're working on such a packaging format in
https://github.com/dimich-g/webpackage. It's still early, and we haven't
yet described how to do things like check certificate and package
revocation, but it's got the overall direction we're thinking about.

Jeffrey


Re: [whatwg] Accessing local files with JavaScript portably and securely

2017-04-20 Thread Anne van Kesteren
On Wed, Apr 19, 2017 at 9:55 PM, Yay295  wrote:
> Maybe a solution then would be to provide a way to request more storage
> space?

Sounds like it. At least in Firefox https://storage.spec.whatwg.org/
will provide that soonish, including the guarantee that the browser
won't remove your application data unless the user asks it to do so.

(This is why it's always good to start with use cases, examples, and
general problem descriptions, before delving into specific solutions
that may or may not solve the problem.)


-- 
https://annevankesteren.nl/