On Sun, Apr 5, 2020 at 7:21 PM Keith Moore <moore@xxxxxxxxxxxxxxxxxxxx> wrote:
On 4/5/20 7:14 PM, Larry Masinter wrote:
> There should be no benefit to native app except for vendor lock-in.
Well, don't discount vendor lock-in. But of course if the app can
communicate directly between peers, whereas the browser cannot, that
consumes fewer resources than routing the traffic through the vendor's
servers, and likely provides better service to users also. An app is
also better positioned to act as spyware.
I did some of that Web stuff back in the day. I was even the first person to write a WebMail server. But really, why are we trying to run everything through one client stack? And in particular one with roughly four UNIX-es worth of complexity in it at this point?
Proprietary apps do provide an opportunity to load malware. But ever since _javascript_ was added into the Web without any thought for the security consequences, the Browser is hardly better in that respect.
I would much rather it was possible to do my email, social media and conferencing through a single app that was not the same app as my Web browser. I don't want my contacts information to share an address space with active code from a Web site. I don't want my private keys or my plaintext messages sharing context either.
We need an open standard for such a client. Because that is the only way users can be assured the client they are downloading hasn't got a backdoor. It isn't a perfect guarantee but it is better than the situation I have now where my messaging provider reconfigures its app every ten days or so. Being forced to install code updates from a single source is a security risk in itself. And don't tell me that frequent updates are necessary for security, if the code is so buggy it has to have an urgent security patch more than once a month, you are doing it wrong.
