RE: RSLs and signing

2013-02-11 Thread Kessler CTR Mark J
] Sent: Monday, February 11, 2013 11:36 AM To: dev@flex.apache.org Subject: Re: RSLs and signing I'm not really sure how it would/could work. But here's what I'm thinking: My idea would be to somehow invoke something from the Apache domain which would store the data. The local st

Re: RSLs and signing

2013-02-11 Thread Harbs
I'm not really sure how it would/could work. But here's what I'm thinking: My idea would be to somehow invoke something from the Apache domain which would store the data. The local stores are domain specific so I don't think you can directly access Apache's store from a different domain. If ther

Re: RSLs and signing

2013-02-11 Thread Alex Harui
On 2/11/13 3:32 AM, "Harbs" wrote: > Okay. Here's a thought: > > What about using HTML local storage to store Apache RSLs that can be loaded as > needed? Can anyone think of a workable way to do that? It won't work for all > browsers, but it'll offer gains for the browsers that do, and it can

Re: RSLs and signing

2013-02-11 Thread Avi Kessner
Interesting idea. I know that for google chrome you could definitely leverage the user's chrome account. Sounds like a fun side project for Chrome enthusiasts. brought to you by the letters A, V, and I and the number 47 On Mon, Feb 11, 2013 at 1:32 PM, Harbs wrote: > Okay. Here's a thought: >

Re: RSLs and signing

2013-02-11 Thread Alex Harui
On 2/11/13 3:08 AM, "Kessler CTR Mark J" wrote: > Well you can still use RSLs if your user base will frequent your site multiple > times in a day. > True, but if you don't use RSLs, you'll be storing less in their browser cache. -- Alex Harui Flex SDK Team Adobe Systems, Inc. http://blogs

Re: RSLs and signing

2013-02-11 Thread Alex Harui
On 2/11/13 3:58 AM, "Justin Mclean" wrote: > Hi, > >> This is persistent storage up to about 20MB or so. Whereas the ones from >> pretty much anyone else will get lost as soon as I clear my web browser >> cache. > > Which most users never never do. Unless the users of your application are

Re: RSLs and signing

2013-02-11 Thread Harbs
Okay. Here's a thought: What about using HTML local storage to store Apache RSLs that can be loaded as needed? Can anyone think of a workable way to do that? It won't work for all browsers, but it'll offer gains for the browsers that do, and it can have a fallback for the ones that don't. Harb

Re: RSLs and signing

2013-02-11 Thread Justin Mclean
Hi, > This is persistent storage up to about 20MB or so. Whereas the ones from > pretty much anyone else will get lost as soon as I clear my web browser cache. Which most users never never do. Unless the users of your application are developers :-) Justin

RE: RSLs and signing

2013-02-11 Thread Kessler CTR Mark J
Well Apache RSL's (signed or unsigned) will be tossed in your regular browser cache. The Adobe signed ones are stored in a separate repository for the swz files n such. My Win7 path is located... C:\Users\[username]\AppData\Roaming\Adobe\Flash Player\AssetCache\[random letters]\ This is pers

RE: RSLs and signing

2013-02-11 Thread Kessler CTR Mark J
unday, February 10, 2013 11:09 AM To: dev@flex.apache.org Subject: Re: RSLs and signing On 2/10/13 7:41 AM, "Harbs" wrote: > The numbers were for release. > > The debug size using RSLs is about 1 MB. > > I'm not really sure if modules can help. There are not many modul

RE: RSLs and signing

2013-02-11 Thread Kessler CTR Mark J
Well you can still use RSLs if your user base will frequent your site multiple times in a day. -Original Message- From: Harbs [mailto:harbs.li...@gmail.com] Sent: Sunday, February 10, 2013 9:54 AM To: dev@flex.apache.org Subject: Re: RSLs and signing Okay. Like you said this sucks

AW: RSLs and signing

2013-02-11 Thread christofer.d...@c-ware.de
ion I could get, was using Apparat to optimize the built swcs and swfs. Eventually it helps :-) Chris Von: Harbs [gavha...@gmail.com] Gesendet: Montag, 11. Februar 2013 08:20 An: dev@flex.apache.org Betreff: Re: RSLs and signing Thanks. That was he

Re: RSLs and signing

2013-02-10 Thread Alex Harui
On 2/10/13 11:20 PM, "Harbs" wrote: > Interesting. That sounds like a good approach. > > How do you set this up in Flash Builder? I've never tried it in FlashBuilder, but as the bit-101.com article explains, it is pretty much all about generating -link-reports and using -load-externs appropr

Re: RSLs and signing

2013-02-10 Thread Harbs
Interesting. That sounds like a good approach. How do you set this up in Flash Builder? Assigning externs that are in the main app seems pretty straight-forward, but I'm not clear on how you'd instruct the compiler to exclude classes from another module (and the main app). On Feb 11, 2013, at 6

Re: RSLs and signing

2013-02-10 Thread Harbs
ex.apache.org > Subject: Re: RSLs and signing > > Hmm. > > While thinking though the implications of using modules, I realized a > potential issue: > > Without RSLs, multiple modules means all that Flex code being compiled into > every one of the modules. Right? Tha

Re: RSLs and signing

2013-02-10 Thread Avi Kessner
The benefits seem obvious to me. I remember a few projects where the client only approved using flex when I explained how the rsl cacheing worked. On Feb 11, 2013 7:25 AM, "Justin Mclean" wrote: > Hi, > > > Where would we host it? I'm not sure Apache wants to serve binary RSLs. > > Seems like it

Re: RSLs and signing

2013-02-10 Thread Justin Mclean
Hi, > Where would we host it? I'm not sure Apache wants to serve binary RSLs. > Seems like it needs to be on an Akamai-type network, which I think costs > money. Obviously we'd need to ask Infra etc but I'm sure something would be possible. First we need to research what benefit is browser cach

Re: RSLs and signing

2013-02-10 Thread Frédéric THOMAS
You can instruct the compiler to be clever, see http://www.bit-101.com/blog/?p=941 -Message d'origine- From: Harbs Sent: Sunday, February 10, 2013 5:46 PM To: dev@flex.apache.org Subject: Re: RSLs and signing Hmm. While thinking though the implications of using modules, I reali

Re: RSLs and signing

2013-02-10 Thread Alex Harui
gt;>>>>> browser), >>>>>>>>>> then it will be cleared from memory. >>>>>>>>>> >>>>>>>>>> Only signed RSLs are cached on disk. >>>>>>>>>> >>>>>>>&

Re: RSLs and signing

2013-02-10 Thread Alex Harui
On 2/10/13 8:36 AM, "Harbs" wrote: > > On Feb 10, 2013, at 6:30 PM, Alex Harui wrote: > >>> Like I said, there are palettes that can be loaded as modules. It might or >>> might not help. The "image" is actually multiple objects rendered as Flex >>> components. Text is a customized RichEditab

Re: RSLs and signing

2013-02-10 Thread Harbs
or a specific domain, or is it just a cross-domain issue? >>>>>>>>>> >>>>>>>>>> If I use RSLs for Flex 4.9 and I update my main app, do the RSLs get >>>>>>>>>> downloaded every time, or will the RSLs from my

Re: RSLs and signing

2013-02-10 Thread Alex Harui
On 2/10/13 2:07 PM, "Justin Mclean" wrote: > Hi, > >> Other than a cross domain policy what else would this require? I lot of JS >> libraries do the same thing so it may be worth investigating. eg google >> hosted libraries at https://developers.google.com/speed/libraries/ > > Looks like thi

Re: RSLs and signing

2013-02-10 Thread Justin Mclean
Hi, > Other than a cross domain policy what else would this require? I lot of JS > libraries do the same thing so it may be worth investigating. eg google > hosted libraries at https://developers.google.com/speed/libraries/ Looks like this is possible (with fallbacks as well): http://help.adobe

Re: RSLs and signing

2013-02-10 Thread Justin Mclean
Hi, > They are cached per-domain in the browser's cache. As a developer, you > have to make the assumption that the browser cache is cleared when the > browser closes Thats the worse case and probably unlikely, the default settings for most (non mobile) browsers give a seizable cache (esp IE).

Re: RSLs and signing

2013-02-10 Thread Justin Mclean
Hi, > The only advantage to un-signed RSLs is if you serve more than one SWF that > uses them from your domain. SWFs end up on disk in a browser cache (if > there is one and within the limitations of that cache) so then there is a > probability you won't have to download some code. Which is also

Re: RSLs and signing

2013-02-10 Thread Nicholas Kwiatkowski
Justin, They are cached per-domain in the browser's cache. As a developer, you have to make the assumption that the browser cache is cleared when the browser closes (as this is the default for some browsers that allow 3rd party plugins to store data in their cache like Chrome). It *may* be longe

Re: RSLs and signing

2013-02-10 Thread Justin Mclean
Hi, > I'm looking to moving from Flex 4.5 to 4.9 in the next few weeks. I just > changed my compile settings to merge instead of using RSLs and the app went > from a little over 600 KB to 1.4 MB. :-( Your application is already that size as the RSLs need to be downloaded if they are not cached.

Re: RSLs and signing

2013-02-10 Thread Justin Mclean
HI, > They are downloaded once per domain, per session. If you visit domain > x.comtwice in a session (as defined by your browser), then it will > stay in memory. If you close your session (typically by closing your > browser), > then it will be cleared from memory. Not correct. RSL will be ca

Re: RSLs and signing

2013-02-10 Thread Harbs
On Feb 10, 2013, at 6:30 PM, Alex Harui wrote: >> Like I said, there are palettes that can be loaded as modules. It might or >> might not help. The "image" is actually multiple objects rendered as Flex >> components. Text is a customized RichEditableText component. (That's being >> changed soon t

Re: RSLs and signing

2013-02-10 Thread Alex Harui
explanation on their Flash Whitepaper. >>>>>>> It >>>>>>>>>> boils down to this : >>>>>>>>>> - They are no longer in control of Flex >>>>>>>>>> - They are no longer doing security revie

Re: RSLs and signing

2013-02-10 Thread Harbs
just a cross-domain issue? >>>>>>>>>> >>>>>>>>>> If I use RSLs for Flex 4.9 and I update my main app, do the RSLs get >>>>>>>>>> downloaded every time, or will the RSLs from my domain be reused? Is >>>>>>>> there >>>&

Re: RSLs and signing

2013-02-10 Thread Harbs
gt;>>>> - They have to sign the Flex package with their security certificate >>>>>>>>> in >>>>>>>>> order for it to be stored in the Flash RSL Cache >>>>>>>>> - They won't sign it anymore because they would be responsible for any >>>>&

Re: RSLs and signing

2013-02-10 Thread Alex Harui
;>>>> Adobe has (had?) a pretty good explanation on their Flash >>> Whitepaper. >>>>>>> It >>>>>>>>>> boils down to this : >>>>>>>>>> - They are no longer in control of Flex >>>>>>>>>&

Re: RSLs and signing

2013-02-10 Thread Harbs
iews of the source code >>>>>>>>> - They have to sign the Flex package with their security >> certificate in >>>>>>>>> order for it to be stored in the Flash RSL Cache >>>>>>>>> - They won't sign it anymore because they would

Re: RSLs and signing

2013-02-10 Thread Alex Harui
>>> >>>>>>>> -Nick >>>>>>>> >>>>>>>> On Sun, Feb 10, 2013 at 8:49 AM, christofer.d...@c-ware.de < >>>>>>>> christofer.d...@c-ware.de> wrote: >>>>>>>> >>>>>>>

Re: RSLs and signing

2013-02-10 Thread Nicholas Kwiatkowski
at 8:49 AM, christofer.d...@c-ware.de < > >>>>>>> christofer.d...@c-ware.de> wrote: > >>>>>>> > >>>>>>>> I have to admit, that I don't quite understand what the inability > to > >>>>>>&

Re: RSLs and signing

2013-02-10 Thread Harbs
t;>>> The problem is that the Flashplayer is able to install rsls that are >>>>>>>> signed by Adobe. Usually the Adobe FDK rsls were also available in >>>>>> signed >>>>>>>> versions (swz files). These were dynamically

Re: RSLs and signing

2013-02-10 Thread Alex Harui
eded and installed by the Flashplayer. The second time the libs >>>>> were >>>>>>> needed the installed versions were used reducing the download time >>>>>>> dramatically. Now the problem is that Adobe won't sign Apache SWCs

Re: RSLs and signing

2013-02-10 Thread Harbs
;>>>> needed the installed versions were used reducing the download time >>>>>> dramatically. Now the problem is that Adobe won't sign Apache SWCs as >>>> they >>>>>> are no longer in charge of the libs code (Understandable). Giving &

Re: RSLs and signing

2013-02-10 Thread Nicholas Kwiatkowski
s because a signed manipulated swz would be used by > >> every > >>>> other website using the same version of a given lib. > >>>> > >>>> Coming back to the RSLs ... The difference between a signed and an > >>>> unsigned RSL is just, th

Re: RSLs and signing

2013-02-10 Thread Harbs
>>>> unsigned RSL is just, that the unsigned rsl is loaded on every visit of >> a >>>> user. As far as I know there is no other difference. So I don't quite >>>> understand why the lack of availability of signed rsls should have any >>>> effect

Re: RSLs and signing

2013-02-10 Thread Nicholas Kwiatkowski
igned RSL is just, that the unsigned rsl is loaded on every visit of > a > >> user. As far as I know there is no other difference. So I don't quite > >> understand why the lack of availability of signed rsls should have any > >> effect on built applications and the def

Re: RSLs and signing

2013-02-10 Thread Frédéric THOMAS
The rsls from your domain is reused IIRC. -Message d'origine- From: Harbs Sent: Sunday, February 10, 2013 3:01 PM To: dev@flex.apache.org Subject: Re: RSLs and signing I apparently missed this. Yes. It does suck. Are RSLs reloaded every time for a specific domain, or is it j

Re: RSLs and signing

2013-02-10 Thread Harbs
and the default linking type. >> >> Chris >> >> >> >> -Ursprüngliche Nachricht- >> Von: Harbs [mailto:harbs.li...@gmail.com] >> Gesendet: Sonntag, 10. Februar 2013 14:19 >> An: dev@flex.apache.org >> Betreff: RSLs and sign

Re: RSLs and signing

2013-02-10 Thread Nicholas Kwiatkowski
ailability of signed rsls should have any > effect on built applications and the default linking type. > > Chris > > > > -Ursprüngliche Nachricht- > Von: Harbs [mailto:harbs.li...@gmail.com] > Gesendet: Sonntag, 10. Februar 2013 14:19 > An: dev@flex.apache.org &

AW: RSLs and signing

2013-02-10 Thread christofer.d...@c-ware.de
lt linking type. Chris -Ursprüngliche Nachricht- Von: Harbs [mailto:harbs.li...@gmail.com] Gesendet: Sonntag, 10. Februar 2013 14:19 An: dev@flex.apache.org Betreff: RSLs and signing I did not realize that Apache Flex does not use RSLs by default. What's the story with signing? I

RSLs and signing

2013-02-10 Thread Harbs
I did not realize that Apache Flex does not use RSLs by default. What's the story with signing? Is that an issue with cross-domain security? Is there any way to get an Apache signature approved for Flash? Either way, I'd imagine I'd want RSLs for the simple reason that updating apps should resu