Hi Hugh,
On 02/19/2014 06:54 AM, Hugh Tay wrote:
> Yes, these are very valid and reasonable points.
>
> However given the Web nature of FireFox OS itself, there's isn't much
> standing in the way of malicious intent to steal paid apps hosted online
> either.
>
> For example, one could root the device to extract the HTML5 source files,
> alter the manifest, re-package the app and host it on a 3rd-party server
> where other users could then install the app 'legitimately'.
>
> We could possibly avoid that by translating the HTML5 source into C/C++,
> compiling to binary and assigning each binary package a unique
> checksum/identifier that Mozilla could track globally, but somehow it seems
> to me this would philosophically be no different from the Apple or Google
> approach and a step backwards for software freedom.
>
> Or we could just accept /sdcard/ as a valid host domain and apply
> navigator.mozApps.installPackage("/sdcard/<app package>") the same way it
> currently handles apps hosted on HTTP servers.
>
> Please share with us what Mozilla's views are on this matter.
My view (which may not be Mozilla's) is that I absolutely want to make
it easy for people to share apps without having to download them over
the network. That may be critical in some markets. That means that
transferring apps through bluetooth, nfc or sd-card are all interesting
options.
And all look a lot like being able to backup and restore your apps.
I'm thinking about an API that would look like:
- To backup/transfer an app:
var app =... ; // any way to get an app handle here could be used.
var blob = yield app.export();
navigator.nfc.send(blob) or navigator.getDeviceStorage('sdcard').add(blob);
- To import an app:
navigator.mozApps.mgmt.import(blob)
I think that would cover most of the needs and let that be composed with
various other apis. Feedback welcome!
Fabrice
--
Fabrice Desré
b2g team
Mozilla Corporation
_______________________________________________
dev-b2g mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-b2g
