My concerns are around browser UAs. AIR, Dashboard, XULRunner, Extensions, etc. can have different policies. I simply want clicking on links in my browser to be safe.<div><br></div><div>Linus</div><div><br></div><div><br><div class="gmail_quote">
On Thu, Aug 27, 2009 at 5:53 PM, Dirk Pranke <span dir="ltr"><<a href="mailto:dpranke@chromium.org">dpranke@chromium.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">On Thu, Aug 27, 2009 at 10:33 AM, Linus Upson<<a href="mailto:linus@google.com">linus@google.com</a>> wrote:<br>
> I don't think there is consensus at Google yet.<br>
> I'm not saying that UAs shouldn't provide file-like lifetime semantics for<br>
> storage. I'm just saying the user should decide, not the web page.<br>
<br>
</div>Linus, are you only considering traditional in-browser web apps that<br>
don't go through an "install" process of any sort (i.e., I go to a URL<br>
in my web browser)?<br>
<br>
Would you hold a different opinion for different types of HTML5-based<br>
applications (like the TiddlyWiki app that gets copied locally)? Or<br>
would you require that all apps go through an install process that<br>
acquires quota, permissions, etc.?<br>
<br>
It seems like others are objecting to your position based on different<br>
application models than the ones you have in mind.<br>
<font color="#888888"><br>
-- Dirk<br>
</font></blockquote></div><br></div>