On Mon, May 19, 2014 at 6:46 PM, Benoit Jacob <jacob.benoi...@gmail.com>wrote:
> +1000! Thanks for articulating so clearly the difference between the > Web-as-an-application-platform and other application platforms. > It really surprises me that you would make this objection. WebGL certainly would *not* fall into this "Web-as-an-application-platform" category since it exposes machine information [1] and is generally insecure [2] according to Apple and (in the past) Microsoft. Please note that I really like WebGL and not worried about these issues. Just pointing out your double standard. 1: http://renderingpipeline.com/webgl-extension-viewer/ 2: http://lists.w3.org/Archives/Public/public-fx/2012JanMar/0136.html > 2014-05-19 21:35 GMT-04:00 Jonas Sicking <jo...@sicking.cc>: > >> On Mon, May 19, 2014 at 4:10 PM, Rik Cabanier <caban...@gmail.com> >> wrote: >> > I don't see why the web platform is special here and we should trust >> that >> > authors can do the right thing. >> >> I'm fairly sure people have already pointed this out to you. But the >> reason the web platform is different is that because we allow >> arbitrary application logic to run on the user's device without any >> user opt-in. >> >> I.e. the web is designed such that it is safe for a user to go to any >> website without having to consider the risks of doing so. >> >> This is why we for example don't allow websites to have arbitrary >> read/write access to the user's filesystem. Something that all the >> other platforms that you have pointed out do. >> >> Those platforms instead rely on that users make a security decision >> before allowing any code to run. This has both advantages (easier to >> design APIs for those platforms) and disadvantages (malware is pretty >> prevalent on for example Windows). >> >> / Jonas >> _______________________________________________ >> dev-platform mailing list >> dev-platform@lists.mozilla.org >> https://lists.mozilla.org/listinfo/dev-platform >> > > _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
