From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Lars Magne Ingebrigtsen Newsgroups: gmane.emacs.devel Subject: Re: eww Date: Thu, 20 Jun 2013 09:17:06 +0200 Message-ID: References: <87d2rkb1pi.fsf@fleche.redhat.com> <87fvwfa3ev.fsf@fleche.redhat.com> <874ncucrlz@ch.ristopher.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1371712658 17498 80.91.229.3 (20 Jun 2013 07:17:38 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 20 Jun 2013 07:17:38 +0000 (UTC) Cc: emacs-devel@gnu.org To: Stefan Monnier Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Thu Jun 20 09:17:39 2013 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1UpZ7h-0001nk-2s for ged-emacs-devel@m.gmane.org; Thu, 20 Jun 2013 09:17:37 +0200 Original-Received: from localhost ([::1]:46015 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UpZ7g-0004rY-IB for ged-emacs-devel@m.gmane.org; Thu, 20 Jun 2013 03:17:36 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:36167) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UpZ7a-0004rC-9N for emacs-devel@gnu.org; Thu, 20 Jun 2013 03:17:34 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1UpZ7X-0002gg-1N for emacs-devel@gnu.org; Thu, 20 Jun 2013 03:17:30 -0400 Original-Received: from hermes.netfonds.no ([80.91.224.195]:51590) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UpZ7W-0002g6-RJ for emacs-devel@gnu.org; Thu, 20 Jun 2013 03:17:26 -0400 Original-Received: from cm-84.215.51.58.getinternet.no ([84.215.51.58] helo=stories.gnus.org) by hermes.netfonds.no with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1UpZ7D-0006OX-9m; Thu, 20 Jun 2013 09:17:07 +0200 Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAElBMVEUNFUtLZXM1SWNsg4/R 19lRa3iRNXTYAAACRklEQVQ4jWWUTY6sMAyETST2hFH26UgcoJXkAKOEPSHx/a/yqsLMvD/T6gZ/ 2C4Xw4j2+G8oogm+5lXW56zPEwAv4dq2RZd7EX8dFxLHA4y5vH+pbEa8d9eTt1buVZBYVcRIEH0q WpsABUaNiCxGryDGaZsVbGV02QnsBo5esyIAcLi3y8vtYQ9oheG37seuLw0uhNCCCce9YQcr/jBG 1CgmizRIMN4Hyt1whtENmXvFbIjANYGYbVVzm9Xv30Am2M11qOxifJhg2XxwBDoB1pOnYsXybqqy zcECZ5061WlhZ6trwfRbgl8Neqc6SimJXsEOeBI2mGmsppQqguBaqePCEmbxBECFXjXcKX6nerO5 VHlMsBuzCK0LmOHYKNWTYFvMujUfwvG6g8aOI2aCXkatEHLWcRb9CoIBgRQSayo/gHuMhATmdcD/ QMUx6l+kCXTk+kQp8U8wakargSH5d0FvVJVnt4KvAVbnTY2qTnThJ1FYL5FyOHzM9pXzqQ63uVKn KgIgCkuoSPXjTJmqYkLTwlYASrNKfQsKMjIYnWqnsIGfzhk0I+sotKrHaXs8x1s4GqBOq8bsx64A cYLpsVIzHgfuzd8VE/RpGWcTlFGoBZd0eGrv5wDIrMHfTYKijlaxvj84XHPPKaJZx1bIZr6ATR1a ce166nwstZ4Oz9VahbscNVABU2qJnzNvnSjysSRuxcL0tj+gl1zmupE1D3AKgOafeHbwm5t9zrTj /5KOV4DR1H4FXwuZs8JPvB7QHhD+jT2EXwnz6pyZQcbAAAAAAElFTkSuQmCC X-Now-Playing: Various's _This May Be My Last Time Singing (1)_: "Traveling Allstars - I'll Fly Away" X-Hashcash: 1:23:130620:monnier@iro.umontreal.ca::/291sivLc1a7rT/P:0000000000000000000000000000000000000Eqgq X-Hashcash: 1:23:130620:emacs-devel@gnu.org::+lcrDrDWn3nf6VXK:000000000000000000000000000000000000000001E2Ex In-Reply-To: (Stefan Monnier's message of "Wed, 19 Jun 2013 08:35:14 -0400") User-Agent: Gnus/5.130008 (Ma Gnus v0.8) Emacs/24.3.50 (gnu/linux) X-MailScanner-ID: 1UpZ7D-0006OX-9m MailScanner-NULL-Check: 1372317427.59222@TLrz0tkSbW8c71PTi7GVhg X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 80.91.224.195 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:160729 Archived-At: Stefan Monnier writes: > That's for the case where you go the same URL. When I go back in my > history, I don't just want to see the same web-page, I want to see it in > the exact state I left it (e.g. with whatever text I had typed into the > forms, with point at the same place, ...). > And most importantly, I want to be able to see it even if the network > connection went down. > > So, no, when going back in my history I do *not* want to honor stuff > like Cache-Control. That would be my preference, too, but there are security implications. Like today's story: http://it.slashdot.org/story/13/06/20/0250206/21-financial-sites-found-to-store-sensitive-data-in-browser-disk-cache Now, eww won't store things in on disk, but if we're storing all this stuff in memory indefinitely, we're leaving the users open for various attacks on their privacy. Like I said, my preference would be to leave everything in memory myself, because I think this attack vector is pretty, er, slim (i.e., "if this is a problem, then my machine is already hacked, so why worry?"), but as a default policy, I think it's problematic. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog http://lars.ingebrigtsen.no/