Re: RSLs and signing

2013-02-10 Thread Alex Harui
On 2/10/13 11:20 PM, "Harbs" wrote: > Interesting. That sounds like a good approach. > > How do you set this up in Flash Builder? I've never tried it in FlashBuilder, but as the bit-101.com article explains, it is pretty much all about generating -link-reports and using -load-externs appropr

Re: RSLs and signing

2013-02-10 Thread Harbs
Interesting. That sounds like a good approach. How do you set this up in Flash Builder? Assigning externs that are in the main app seems pretty straight-forward, but I'm not clear on how you'd instruct the compiler to exclude classes from another module (and the main app). On Feb 11, 2013, at 6

Re: RSLs and signing

2013-02-10 Thread Harbs
Thanks. That was helpful. Harbs On Feb 11, 2013, at 6:37 AM, Frédéric THOMAS wrote: > You can instruct the compiler to be clever, see > http://www.bit-101.com/blog/?p=941 > > -Message d'origine- From: Harbs > Sent: Sunday, February 10, 2013 5:46 PM > To: dev@flex.apache.org > Subject:

Re: RSLs and signing

2013-02-10 Thread Avi Kessner
The benefits seem obvious to me. I remember a few projects where the client only approved using flex when I explained how the rsl cacheing worked. On Feb 11, 2013 7:25 AM, "Justin Mclean" wrote: > Hi, > > > Where would we host it? I'm not sure Apache wants to serve binary RSLs. > > Seems like it

Re: RSLs and signing

2013-02-10 Thread Justin Mclean
Hi, > Where would we host it? I'm not sure Apache wants to serve binary RSLs. > Seems like it needs to be on an Akamai-type network, which I think costs > money. Obviously we'd need to ask Infra etc but I'm sure something would be possible. First we need to research what benefit is browser cach

Re: RSLs and signing

2013-02-10 Thread Frédéric THOMAS
You can instruct the compiler to be clever, see http://www.bit-101.com/blog/?p=941 -Message d'origine- From: Harbs Sent: Sunday, February 10, 2013 5:46 PM To: dev@flex.apache.org Subject: Re: RSLs and signing Hmm. While thinking though the implications of using modules, I realized a

Re: RSLs and signing

2013-02-10 Thread Alex Harui
On 2/10/13 8:46 AM, "Harbs" wrote: > Hmm. > > While thinking though the implications of using modules, I realized a > potential issue: > > Without RSLs, multiple modules means all that Flex code being compiled into > every one of the modules. Right? You can load shared-code modules (effectiv

Re: RSLs and signing

2013-02-10 Thread Alex Harui
On 2/10/13 8:36 AM, "Harbs" wrote: > > On Feb 10, 2013, at 6:30 PM, Alex Harui wrote: > >>> Like I said, there are palettes that can be loaded as modules. It might or >>> might not help. The "image" is actually multiple objects rendered as Flex >>> components. Text is a customized RichEditab

Re: RSLs and signing

2013-02-10 Thread Harbs
Hmm. While thinking though the implications of using modules, I realized a potential issue: Without RSLs, multiple modules means all that Flex code being compiled into every one of the modules. Right? That could result in a total load size that's many times the size of a single app. On Feb 10

Re: RSLs and signing

2013-02-10 Thread Alex Harui
On 2/10/13 2:07 PM, "Justin Mclean" wrote: > Hi, > >> Other than a cross domain policy what else would this require? I lot of JS >> libraries do the same thing so it may be worth investigating. eg google >> hosted libraries at https://developers.google.com/speed/libraries/ > > Looks like thi

Re: RSLs and signing

2013-02-10 Thread Justin Mclean
Hi, > Other than a cross domain policy what else would this require? I lot of JS > libraries do the same thing so it may be worth investigating. eg google > hosted libraries at https://developers.google.com/speed/libraries/ Looks like this is possible (with fallbacks as well): http://help.adobe

Re: RSLs and signing

2013-02-10 Thread Justin Mclean
Hi, > They are cached per-domain in the browser's cache. As a developer, you > have to make the assumption that the browser cache is cleared when the > browser closes Thats the worse case and probably unlikely, the default settings for most (non mobile) browsers give a seizable cache (esp IE).

Re: RSLs and signing

2013-02-10 Thread Justin Mclean
Hi, > The only advantage to un-signed RSLs is if you serve more than one SWF that > uses them from your domain. SWFs end up on disk in a browser cache (if > there is one and within the limitations of that cache) so then there is a > probability you won't have to download some code. Which is also

Re: RSLs and signing

2013-02-10 Thread Nicholas Kwiatkowski
Justin, They are cached per-domain in the browser's cache. As a developer, you have to make the assumption that the browser cache is cleared when the browser closes (as this is the default for some browsers that allow 3rd party plugins to store data in their cache like Chrome). It *may* be longe

Re: RSLs and signing

2013-02-10 Thread Justin Mclean
Hi, > I'm looking to moving from Flex 4.5 to 4.9 in the next few weeks. I just > changed my compile settings to merge instead of using RSLs and the app went > from a little over 600 KB to 1.4 MB. :-( Your application is already that size as the RSLs need to be downloaded if they are not cached.

Re: RSLs and signing

2013-02-10 Thread Justin Mclean
HI, > They are downloaded once per domain, per session. If you visit domain > x.comtwice in a session (as defined by your browser), then it will > stay in memory. If you close your session (typically by closing your > browser), > then it will be cleared from memory. Not correct. RSL will be ca

Re: RSLs and signing

2013-02-10 Thread Harbs
On Feb 10, 2013, at 6:30 PM, Alex Harui wrote: >> Like I said, there are palettes that can be loaded as modules. It might or >> might not help. The "image" is actually multiple objects rendered as Flex >> components. Text is a customized RichEditableText component. (That's being >> changed soon t

Re: RSLs and signing

2013-02-10 Thread Alex Harui
On 2/10/13 8:18 AM, "Harbs" wrote: > > On Feb 10, 2013, at 6:08 PM, Alex Harui wrote: > >> >> >> >> On 2/10/13 7:41 AM, "Harbs" wrote: >> >>> The numbers were for release. >>> >>> The debug size using RSLs is about 1 MB. >>> >>> I'm not really sure if modules can help. There are not m

Re: RSLs and signing

2013-02-10 Thread Harbs
On Feb 10, 2013, at 6:13 PM, Alex Harui wrote: > > > > On 2/10/13 8:00 AM, "Harbs" wrote: > >> This is degenerating into a discussion that should probably move to the user >> list, but... >> >> TLF is a must, but the whole TLF library shouldn't be more than 180-190 KB. >> >> Nothing like D

Re: RSLs and signing

2013-02-10 Thread Harbs
On Feb 10, 2013, at 6:08 PM, Alex Harui wrote: > > > > On 2/10/13 7:41 AM, "Harbs" wrote: > >> The numbers were for release. >> >> The debug size using RSLs is about 1 MB. >> >> I'm not really sure if modules can help. There are not many modular >> components >> in the app. Maybe I can lo

Re: RSLs and signing

2013-02-10 Thread Alex Harui
On 2/10/13 8:00 AM, "Harbs" wrote: > This is degenerating into a discussion that should probably move to the user > list, but... > > TLF is a must, but the whole TLF library shouldn't be more than 180-190 KB. > > Nothing like Datagrid is being used. I have a bunch of RichEditableText > compo

Re: RSLs and signing

2013-02-10 Thread Harbs
This is degenerating into a discussion that should probably move to the user list, but… TLF is a must, but the whole TLF library shouldn't be more than 180-190 KB. Nothing like Datagrid is being used. I have a bunch of RichEditableText components that I will probably factor out. That might help

Re: RSLs and signing

2013-02-10 Thread Alex Harui
On 2/10/13 7:41 AM, "Harbs" wrote: > The numbers were for release. > > The debug size using RSLs is about 1 MB. > > I'm not really sure if modules can help. There are not many modular components > in the app. Maybe I can load the image browser as a module, but I don't know > how much of a di

Re: RSLs and signing

2013-02-10 Thread Nicholas Kwiatkowski
The caching rules of RSLs and SWFs are for the most part, are the same. Depending on your IDE, you may be able to build a dependency tree, which should help you determine where your bulk is coming from. I find that certain components (mx:DataGrid, for example), add in about 250k just for being th

Re: RSLs and signing

2013-02-10 Thread Harbs
The numbers were for release. The debug size using RSLs is about 1 MB. I'm not really sure if modules can help. There are not many modular components in the app. Maybe I can load the image browser as a module, but I don't know how much of a difference that will make. There are a number of palet

Re: RSLs and signing

2013-02-10 Thread Alex Harui
The only advantage to un-signed RSLs is if you serve more than one SWF that uses them from your domain. SWFs end up on disk in a browser cache (if there is one and within the limitations of that cache) so then there is a probability you won't have to download some code. Apache Flex will hopefully

Re: RSLs and signing

2013-02-10 Thread Harbs
Okay. Like you said this sucks. I'm looking to moving from Flex 4.5 to 4.9 in the next few weeks. I just changed my compile settings to merge instead of using RSLs and the app went from a little over 600 KB to 1.4 MB. :-( I clearly have a lot of work to do removing dependency on a lot of classe

Re: RSLs and signing

2013-02-10 Thread Nicholas Kwiatkowski
When I say signed, I'm meaning signed by Adobe. There really is little benefit to sign an RSL with our certificates, as they are in the web of trust of the Flash Player. >From what I've been told, unless it is signed by Adobe, it is not in the persistent cache, so it is not cached on disk, period

Re: RSLs and signing

2013-02-10 Thread Harbs
Bah! So they're totally useless. swfs are also cached by the browser for that session. Correct? Is there any logic to not caching RSLs for the domain that loaded them? > Only signed RSLs are cached on disk. Signed meaning signed by Adobe. Right? There's no way to sign a RSL with an SSL or code

Re: RSLs and signing

2013-02-10 Thread Nicholas Kwiatkowski
They are downloaded once per domain, per session. If you visit domain x.comtwice in a session (as defined by your browser), then it will stay in memory. If you close your session (typically by closing your browser), then it will be cleared from memory. Only signed RSLs are cached on disk. -Nick

Re: RSLs and signing

2013-02-10 Thread Frédéric THOMAS
The rsls from your domain is reused IIRC. -Message d'origine- From: Harbs Sent: Sunday, February 10, 2013 3:01 PM To: dev@flex.apache.org Subject: Re: RSLs and signing I apparently missed this. Yes. It does suck. Are RSLs reloaded every time for a specific domain, or is it just a cros

Re: RSLs and signing

2013-02-10 Thread Harbs
I apparently missed this. Yes. It does suck. Are RSLs reloaded every time for a specific domain, or is it just a cross-domain issue? If I use RSLs for Flex 4.9 and I update my main app, do the RSLs get downloaded every time, or will the RSLs from my domain be reused? Is there any point in using

Re: RSLs and signing

2013-02-10 Thread Nicholas Kwiatkowski
Adobe has (had?) a pretty good explanation on their Flash Whitepaper. It boils down to this : - They are no longer in control of Flex - They are no longer doing security reviews of the source code - They have to sign the Flex package with their security certificate in order for it to be stored

AW: RSLs and signing

2013-02-10 Thread christofer.d...@c-ware.de
I have to admit, that I don't quite understand what the inability to create signed rsls has to do with the usage of rsls themselves. The problem is that the Flashplayer is able to install rsls that are signed by Adobe. Usually the Adobe FDK rsls were also available in signed versions (swz file

RSLs and signing

2013-02-10 Thread Harbs
I did not realize that Apache Flex does not use RSLs by default. What's the story with signing? Is that an issue with cross-domain security? Is there any way to get an Apache signature approved for Flash? Either way, I'd imagine I'd want RSLs for the simple reason that updating apps should resu