From sh162551@sac.sfbay.sun.com Thu Dec 18 22:27:18 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mBJ6RHiB025782 for ; Thu, 18 Dec 2008 22:27:18 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id mBJ6RGfZ009753; Fri, 19 Dec 2008 14:27:16 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KC400D1J1XFU800@nwk-avmta-2.sfbay.sun.com>; Thu, 18 Dec 2008 22:27:15 -0800 (PST) Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KC4006791XFL180@nwk-avmta-2.sfbay.sun.com>; Thu, 18 Dec 2008 22:27:15 -0800 (PST) Received: from sac.sfbay.sun.com (new-sac.SFBay.Sun.COM [129.146.175.65]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id mBJ6RDIh053916; Thu, 18 Dec 2008 22:27:13 -0800 (PST) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mBJ6RCiD025776; Thu, 18 Dec 2008 22:27:12 -0800 (PST) Received: (from sh162551@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id mBJ6RCEI025771; Thu, 18 Dec 2008 22:27:12 -0800 (PST) Date: Thu, 18 Dec 2008 22:27:12 -0800 (PST) From: Shi-Ying Irene Huang Subject: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] To: LSARC-ext@sun.com Cc: Alfred.peng@sun.com, Chris.wang@sun.com Message-id: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 6052 Template Version: @(#)sac_nextcase %I% %G% SMI This information is Copyright 2008 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: WebKit 1.2. Name of Document Author/Supplier: Author: Chris Wang 1.3 Date of This Document: 18 December, 2008 4. Technical Description 1. Introduction 1.1. Project/Component Working Name: Webkit 1.0.3 for Solaris 1.2. Name of Document Author/Supplier: Chris Wang 1.3. Date of This Document: 12/10/08 1.5. Email Aliases: 1.5.1. Responsible Manager: leo.binchy@sun.com 1.5.2. Responsible Engineer: chris.wang@sun.com alfred.peng@sun.com 2. Project Summary 2.1. Project Description: WebKit is an open source web browser engine. It's also the name of the Mac OS X system framework version of the engine that's used by Safari, Dashboard, Mail, and many other OS X applications. WebKit's HTML and JavaScript code began as a branch of the KHTML and KJS libraries from KDE. WebKit is built on top of different widget backend, which includes GTK, Qt, wxWidgets and some others as well. WebKit/GTK+ is a community sub-project maintained mostly by GNOME and GTK+ developers. It's implemented directly on top of GTK+, GLib and GNOME libraries and provides lightweight web viewing and editing features as well as being the basis for complete web browser applications. It supports the latest web standards and offers good performance and memory usage characteristics on the desktop. WebKit/GTK+ is the engine for different GNOME applications to depend on, devhelp/yelp for example. WebKit is open source software with portions licensed under the LGPL and BSD licenses. The release schedule for WebKit will be matched with GNOME's 6-month release cycle. Currently, GNOME applications including devhelp/epiphany have switched to link against WebKit. The latest development snapshot, and eventually stable versions of Webkit are available at http://webkit.org. 4. Technical Description: 4.1. Details: WebKit has the following features: - CSS 2.1, CSS3 support. - DOM (Document Object Model) - Styleable form controls with CSS. - Drosera (A JavaScript debugger for WebKit that can be used with any application that uses WebKit) - Enhanced Rich Text Editing. - XML techologies support, including XPath, SVG and XSLTProcessor (JavaScript API for XSLT). - Netscape-style (NPAPI) plugins support. - WebKit embedding API (provides clients with a public API for loading, displaying and manipulating Web content.) WebKit is featured with AT-SPI accessibility layer since version 1.0.1. Gnome accessibility team are working hard with WebKit team to ensure Webkit is accessible when gnome 2.26 comes out. 4.5. Interfaces: Exported interfaces: Interface Stability Comment --------------------------------------------------------------------------------- SUNWwebkit Uncommitted SVr4 package SUNWwebkit-devel Uncommitted SVr4 package /usr/lib/libwebkit-1.0.so.1 Volatile webkit lib /usr/lib/${MACH64}/libwebkit-1.0.so.1 Volatile 64bit webkit lib /usr/include/webkit-1.0 Volatile webkit head file directory /usr/lib/pkgconfig/webkit-1.0.pc Uncommitted webkit pc file /usr/lib/${MACH64}/pkgconfig/webkit-1.0.pc Uncommitted webkit pc file $HOME/.local/share/webkit Project Private client-side database storage (see reference 2 for detail) Imported Interfaces Interface Stability Comments ------------------------------------------------------------------------------------ ATK,gtk+,Cairo,Pango Committed LSARC/2007/520 libtiff, libjpeg and libpng Volatile LSARC/2003/085 librsvg Consolidation LSARC/2001/352 Private Apache Standard C++ Library Committed PSARC/2008/549 cURL Uncommitted PSARC/2007/165 IDN Uncommitted PSARC/2007/167 International Components for Unicode Contract External PSARC/2005/041 SQLite Committed PSARC/2008/120 libxml2 Standard PSARC/2001/175 zlib Standard PSARC/2006/537 4.9. I18N/L10N Impact: The JDS team and the G11N are working together to evaluate I18N/L10N support 4.10. Packaging & Delivery: The project will be delivering the following packages: SUNWwebkit SUNWwebkit-devel 4.11. Security Impact: In the future, the WebKit community plans that WebKit/GTK+ will use cURL and then OpenSSL library to verify the peer's certificates for HTTPS connections. However, this feature is not implemented yet. 5. Reference Documents: 1.SUNWwebkit,SUNWwebkit-devel pkgmap pkginfo depend 2.XDG Base Directory Specification http://standards.freedesktop.org/basedir-spec/latest/ar01s03.html 3.WebKit community http://webkit.org/ 4.WebKit wiki page http://trac.webkit.org/wiki 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: Desktop 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From Irene.Huang@sun.com Thu Dec 18 23:38:19 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mBJ7cI67026714 for ; Thu, 18 Dec 2008 23:38:18 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id mBJ7cDE9016732 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Fri, 19 Dec 2008 15:38:17 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KC400M0157Q7V00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 19 Dec 2008 00:38:14 -0700 (MST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KC4000CQ57O0XB0@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 19 Dec 2008 00:38:13 -0700 (MST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mBJ7cCr8027836 for ; Fri, 19 Dec 2008 07:38:12 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0KC40020153Z7S00@mail-apac.sun.com> (original mail from Irene.Huang@Sun.COM) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 19 Dec 2008 15:38:12 +0800 (SGT) Received: from [129.158.217.203] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0KC40035457L4P65@mail-apac.sun.com>; Fri, 19 Dec 2008 15:38:11 +0800 (SGT) Date: Fri, 19 Dec 2008 15:38:05 +0800 From: Irene Huang Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> Sender: Irene.Huang@sun.com To: Shi-Ying Irene Huang Cc: LSARC-ext@sun.com, Alfred.Peng@sun.com, Chris.Wang@sun.com Message-id: <494B4F5D.6010409@sun.com> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_hRxx+HKWn4Z1nz/tJe5n2w)" X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) Status: RO Content-Length: 12237 This is a multi-part message in MIME format. --Boundary_(ID_hRxx+HKWn4Z1nz/tJe5n2w) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Hi, All Attached are the pkgmaps for SUNWwebkit and SUNWwebkit-devel --Irene Shi-Ying Irene Huang wrote: > Template Version: @(#)sac_nextcase %I% %G% SMI > This information is Copyright 2008 Sun Microsystems > 1. Introduction > 1.1. Project/Component Working Name: > WebKit > 1.2. Name of Document Author/Supplier: > Author: Chris Wang > 1.3 Date of This Document: > 18 December, 2008 > 4. Technical Description > 1. Introduction > 1.1. Project/Component Working Name: Webkit 1.0.3 for Solaris > > 1.2. Name of Document Author/Supplier: Chris Wang > > 1.3. Date of This Document: 12/10/08 > > 1.5. Email Aliases: > 1.5.1. Responsible Manager: leo.binchy@sun.com > 1.5.2. Responsible Engineer: chris.wang@sun.com > alfred.peng@sun.com > > 2. Project Summary > 2.1. Project Description: > > WebKit is an open source web browser engine. It's also the name of the Mac > OS X system framework version of the engine that's used by Safari, > Dashboard, Mail, and many other OS X applications. WebKit's HTML and > JavaScript code began as a branch of the KHTML and KJS libraries from KDE. > > WebKit is built on top of different widget backend, which includes GTK, Qt, > wxWidgets and some others as well. > > WebKit/GTK+ is a community sub-project maintained mostly by GNOME and > GTK+ developers. It's implemented directly on top of GTK+, GLib and GNOME > libraries and provides lightweight web viewing and editing features as > well as being the basis for complete web browser applications. It supports > the latest web standards and offers good performance and memory usage > characteristics on the desktop. > > WebKit/GTK+ is the engine for different GNOME applications to depend on, > devhelp/yelp for example. > > WebKit is open source software with portions licensed under the LGPL and > BSD licenses. > > The release schedule for WebKit will be matched with GNOME's 6-month > release cycle. Currently, GNOME applications including devhelp/epiphany > have switched to link against WebKit. > > The latest development snapshot, and eventually stable versions of > Webkit are available at http://webkit.org. > > 4. Technical Description: > 4.1. Details: > WebKit has the following features: > - CSS 2.1, CSS3 support. > - DOM (Document Object Model) > - Styleable form controls with CSS. > - Drosera (A JavaScript debugger for WebKit that can be used > with any application that uses WebKit) > - Enhanced Rich Text Editing. > - XML techologies support, including XPath, SVG and XSLTProcessor > (JavaScript API for XSLT). > - Netscape-style (NPAPI) plugins support. > - WebKit embedding API (provides clients with a public API for > loading, displaying and manipulating Web content.) > > WebKit is featured with AT-SPI accessibility layer since version 1.0.1. > Gnome accessibility team are working hard with WebKit team to ensure Webkit > is accessible when gnome 2.26 comes out. > > 4.5. Interfaces: > > Exported interfaces: > > Interface Stability Comment > --------------------------------------------------------------------------------- > SUNWwebkit Uncommitted SVr4 package > SUNWwebkit-devel Uncommitted SVr4 package > /usr/lib/libwebkit-1.0.so.1 Volatile webkit lib > /usr/lib/${MACH64}/libwebkit-1.0.so.1 Volatile 64bit webkit lib > /usr/include/webkit-1.0 Volatile webkit head file directory > /usr/lib/pkgconfig/webkit-1.0.pc Uncommitted webkit pc file > /usr/lib/${MACH64}/pkgconfig/webkit-1.0.pc Uncommitted webkit pc file > $HOME/.local/share/webkit Project Private client-side database storage > (see reference 2 for detail) > > > > > Imported Interfaces > Interface Stability Comments > ------------------------------------------------------------------------------------ > > ATK,gtk+,Cairo,Pango Committed LSARC/2007/520 > libtiff, libjpeg and libpng Volatile LSARC/2003/085 > librsvg Consolidation LSARC/2001/352 > Private > Apache Standard C++ Library Committed PSARC/2008/549 > cURL Uncommitted PSARC/2007/165 > IDN Uncommitted PSARC/2007/167 > International Components for Unicode Contract External PSARC/2005/041 > SQLite Committed PSARC/2008/120 > libxml2 Standard PSARC/2001/175 > zlib Standard PSARC/2006/537 > > 4.9. I18N/L10N Impact: > The JDS team and the G11N are working together to evaluate I18N/L10N support > > 4.10. Packaging & Delivery: > The project will be delivering the following packages: > SUNWwebkit > SUNWwebkit-devel > > 4.11. Security Impact: > In the future, the WebKit community plans that WebKit/GTK+ will use cURL > and then OpenSSL library to verify the peer's certificates for HTTPS > connections. However, this feature is not implemented yet. > > > 5. Reference Documents: > 1.SUNWwebkit,SUNWwebkit-devel > pkgmap > pkginfo > depend > > 2.XDG Base Directory Specification > http://standards.freedesktop.org/basedir-spec/latest/ar01s03.html > > 3.WebKit community > http://webkit.org/ > 4.WebKit wiki page > http://trac.webkit.org/wiki > > > 6. Resources and Schedule > 6.4. Steering Committee requested information > 6.4.1. Consolidation C-team Name: > Desktop > 6.5. ARC review type: FastTrack > 6.6. ARC Exposure: open > > --Boundary_(ID_hRxx+HKWn4Z1nz/tJe5n2w) Content-type: text/plain; name=SUNWwebkit-devel.pkgmap.txt Content-transfer-encoding: 7BIT Content-disposition: inline; filename=SUNWwebkit-devel.pkgmap.txt : 1 789 1 i copyright 0 0 1229583614 1 i depend 524 45333 1229583614 1 d none include 0755 root bin 1 d none include/webkit-1.0 0755 root bin 1 d none include/webkit-1.0/JavaScriptCore 0755 root bin 1 d none include/webkit-1.0/JavaScriptCore/API 0755 root bin 1 f none include/webkit-1.0/JavaScriptCore/API/APICast.h 0644 root bin 3543 31714 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSBase.h 0644 root bin 6144 7392 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSBasePrivate.h 0644 root bin 2120 39589 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSCallbackConstructor.h 0644 root bin 2322 56256 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSCallbackFunction.h 0644 root bin 2298 52620 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSCallbackObject.h 0644 root bin 4152 8672 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSCallbackObjectFunctions.h 0644 root bin 20260 55729 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSClassRef.h 0644 root bin 5057 36304 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSContextRef.h 0644 root bin 5183 52175 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSObjectRef.h 0644 root bin 38008 23500 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSProfilerPrivate.h 0644 root bin 2227 47891 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSRetainPtr.h 0644 root bin 5183 18904 1224797495 1 f none include/webkit-1.0/JavaScriptCore/API/JSStringRef.h 0644 root bin 5617 15230 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSStringRefBSTR.h 0644 root bin 2359 55510 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSStringRefCF.h 0644 root bin 2418 62602 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSValueRef.h 0644 root bin 10953 22535 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JavaScript.h 0644 root bin 1667 64216 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JavaScriptCore.h 0644 root bin 1522 51587 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/OpaqueJSString.h 0644 root bin 2602 7253 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/WebKitAvailability.h 0644 root bin 27474 21986 1227533723 1 f none include/webkit-1.0/JavaScriptCore/APICast.h 0644 root bin 40 3422 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JSBase.h 0644 root bin 39 3345 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JSContextRef.h 0644 root bin 45 3992 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JSObjectRef.h 0644 root bin 44 3850 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JSRetainPtr.h 0644 root bin 44 3887 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JSStringRef.h 0644 root bin 44 3882 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JSStringRefCF.h 0644 root bin 46 4019 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JSValueRef.h 0644 root bin 43 3760 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JavaScript.h 0644 root bin 43 3824 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JavaScriptCore.h 0644 root bin 47 4217 1224797495 1 f none include/webkit-1.0/JavaScriptCore/OpaqueJSString.h 0644 root bin 47 4216 1227533723 1 f none include/webkit-1.0/JavaScriptCore/WebKitAvailability.h 0644 root bin 51 4634 1227533723 1 d none include/webkit-1.0/webkit 0755 root bin 1 f none include/webkit-1.0/webkit/webkit.h 0644 root bin 1279 44777 1229583612 1 f none include/webkit-1.0/webkit/webkitdefines.h 0644 root bin 2188 58032 1229583612 1 f none include/webkit-1.0/webkit/webkitenumtypes.h 0644 root bin 545 46726 1229583612 1 f none include/webkit-1.0/webkit/webkitnetworkrequest.h 0644 root bin 2380 64373 1229583612 1 f none include/webkit-1.0/webkit/webkitprivate.h 0644 root bin 4699 64096 1229583612 1 f none include/webkit-1.0/webkit/webkitversion.h 0644 root bin 1586 63524 1229583612 1 f none include/webkit-1.0/webkit/webkitwebbackforwardlist.h 0644 root bin 4798 57476 1229583612 1 f none include/webkit-1.0/webkit/webkitwebframe.h 0644 root bin 3502 15943 1229583612 1 f none include/webkit-1.0/webkit/webkitwebhistoryitem.h 0644 root bin 3120 59919 1229583612 1 f none include/webkit-1.0/webkit/webkitwebinspector.h 0644 root bin 2401 1889 1229583612 1 f none include/webkit-1.0/webkit/webkitwebsettings.h 0644 root bin 2363 63053 1229583612 1 f none include/webkit-1.0/webkit/webkitwebview.h 0644 root bin 12644 10813 1229583612 1 d none lib 0755 root bin 1 d none lib/amd64 0755 root bin 1 d none lib/amd64/pkgconfig 0755 root other 1 f none lib/pkgconfig/webkit-1.0.pc 0644 root bin 245 21622 1229583612 1 d none lib/pkgconfig 0755 root other 1 f none lib/pkgconfig/webkit-1.0.pc 0644 root bin 239 21220 1229583612 1 i pkginfo 707 58678 1229583615 --Boundary_(ID_hRxx+HKWn4Z1nz/tJe5n2w) Content-type: text/plain; name=SUNWwebkit.pkgmap.txt Content-transfer-encoding: 7BIT Content-disposition: inline; filename=SUNWwebkit.pkgmap.txt : 1 69775 1 i copyright 0 0 1229576007 1 i depend 524 45333 1229576007 1 d none lib 0755 root bin 1 d none lib/amd64 0755 root bin 1 s none lib/amd64/libwebkit-1.0.so=libwebkit-1.0.so.1 1 f none lib/amd64/libwebkit-1.0.so.1 0755 root bin 50667780 56005 1229576006 1 s none lib/libwebkit-1.0.so=libwebkit-1.0.so.1 1 f none lib/libwebkit-1.0.so.1 0755 root bin 35681532 25505 1229576006 1 i pkginfo 661 54401 1229576007 --Boundary_(ID_hRxx+HKWn4Z1nz/tJe5n2w)-- From storycrafter@gmail.com Tue Dec 23 09:03:23 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mBNH3MMu006372 for ; Tue, 23 Dec 2008 09:03:23 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id mBNH3JAP000790; Wed, 24 Dec 2008 01:03:19 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KCC00I4LA1IKY00@nwk-avmta-2.sfbay.sun.com>; Tue, 23 Dec 2008 09:03:18 -0800 (PST) Received: from sca-ea-mail-3.sun.com ([192.18.43.21]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KCC00F8UA1IMV30@nwk-avmta-2.sfbay.sun.com>; Tue, 23 Dec 2008 09:03:18 -0800 (PST) Received: from relay11i.sun.com (ip121.net129179-4.block1.us.syntegra.com [129.179.4.121]) by sca-ea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mBNH3Hav018425; Tue, 23 Dec 2008 17:03:18 +0000 (GMT) Received: from mmp11es.mmp.us.syntegra.com ([160.41.208.11] [160.41.208.11]) by relay11i.sun.com with ESMTP id BT-MMP-1408882; Tue, 23 Dec 2008 17:03:17 +0000 (Z) Received: from relay13i.sun.com (relay13i.sun.com [129.179.4.123]) by mmp11es.mmp.us.syntegra.com with ESMTP id BT-MMP-34130463; Tue, 23 Dec 2008 17:03:16 +0000 (Z) Received: from mail-gx0-f16.google.com ([209.85.217.16] [209.85.217.16]) by relay1ib.sun.com with ESMTP id BT-MMP-12309516; Tue, 23 Dec 2008 17:03:16 +0000 (Z) Received: by mail-gx0-f16.google.com with SMTP id 9so1709437gxk.8 for ; Tue, 23 Dec 2008 09:03:15 -0800 (PST) Received: by 10.65.84.15 with SMTP id m15mr6125820qbl.54.1230051794830; Tue, 23 Dec 2008 09:03:14 -0800 (PST) Received: from ?172.16.12.121? ([70.232.181.5]) by mx.google.com with ESMTPS id 28sm17091594qbw.16.2008.12.23.09.03.13 (version=TLSv1/SSLv3 cipher=RC4-MD5) ; Tue, 23 Dec 2008 09:03:13 -0800 (PST) Date: Tue, 23 Dec 2008 11:03:12 -0600 From: Mark Martin Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <494B4F5D.6010409@sun.com> To: Irene Huang Cc: Shi-Ying Irene Huang , Chris.Wang@sun.com, LSARC-ext@sun.com, Alfred.Peng@sun.com Message-id: <495119D0.9070209@gmail.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:cc:subject:references:in-reply-to :content-type:content-transfer-encoding; bh=hL5Pl4I1QJR0yjekMQ4W6tiDKrPKw3/DTFFBldlidSE=; b=YeCfDOpAziWYKJ2I+14a75i2/qJpUWLln8pI6HKF/n6uWnBNuDrxWa/86xad5UzZO+ ksq6+AqrQl8kq3H1BR9cLUhSXS/Wlk1ftDJUNUJhKvVhe3aviEuqr2JOdVJ//vgNYo+R 9tNA1KGGVEv5tGbOYYXlFz156+Pma+49IExpI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; b=LX1nDCFHAVrnyMbgb1gIDqFtmL7DbY8ohpcMOPPmn3OFbeAOxN6DMchGoDI7tUUnFs r4i5ROIvvn/o2Fp6xQd22ZI8Te8sTOsfs+9MLMIzm9a1YSNV7ejfxVYFaZ0KeIDRH6mp txlSKUYzVMR10k2L8MTFn//gqK1LfPBeJDH18= X-PMX-Version: 5.4.1.325704 X-Brightmail-Tracker: AAAAAA== X-Antispam: No, score=-2.6/5.0, scanned in 0.296sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <494B4F5D.6010409@sun.com> User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) Status: RO Content-Length: 7080 Irene Huang wrote: > Hi, All > > Attached are the pkgmaps for SUNWwebkit and SUNWwebkit-devel > > --Irene > Shi-Ying Irene Huang wrote: >> Template Version: @(#)sac_nextcase %I% %G% SMI >> This information is Copyright 2008 Sun Microsystems >> 1. Introduction >> 1.1. Project/Component Working Name: >> WebKit >> 1.2. Name of Document Author/Supplier: >> Author: Chris Wang >> 1.3 Date of This Document: >> 18 December, 2008 >> 4. Technical Description >> 1. Introduction >> 1.1. Project/Component Working Name: Webkit 1.0.3 for Solaris >> 1.2. Name of Document Author/Supplier: Chris Wang >> 1.3. Date of This Document: 12/10/08 This looks fine to me, so I'd +1 this. I'm not a member, so that may not be worth very much. I'm also assuming it is SOP to deliver the .pc files. >> >> 1.5. Email Aliases: >> 1.5.1. Responsible Manager: leo.binchy@sun.com >> 1.5.2. Responsible Engineer: chris.wang@sun.com >> alfred.peng@sun.com >> 2. Project Summary >> 2.1. Project Description: >> WebKit is an open source web browser engine. It's also >> the name of the Mac >> OS X system framework version of the engine that's used by >> Safari, >> Dashboard, Mail, and many other OS X applications. WebKit's >> HTML and >> JavaScript code began as a branch of the KHTML and KJS >> libraries from KDE. >> >> WebKit is built on top of different widget backend, which >> includes GTK, Qt, >> wxWidgets and some others as well. >> WebKit/GTK+ is a community sub-project maintained mostly by >> GNOME and >> GTK+ developers. It's implemented directly on top of GTK+, >> GLib and GNOME >> libraries and provides lightweight web viewing and editing >> features as >> well as being the basis for complete web browser >> applications. It supports >> the latest web standards and offers good performance and >> memory usage >> characteristics on the desktop. >> >> WebKit/GTK+ is the engine for different GNOME applications to >> depend on, >> devhelp/yelp for example. >> >> WebKit is open source software with portions licensed under >> the LGPL and BSD licenses. >> The release schedule for WebKit will be matched with GNOME's >> 6-month >> release cycle. Currently, GNOME applications including >> devhelp/epiphany >> have switched to link against WebKit. >> >> The latest development snapshot, and eventually stable >> versions of >> Webkit are available at http://webkit.org. >> 4. Technical Description: >> 4.1. Details: >> WebKit has the following features: >> - CSS 2.1, CSS3 support. >> - DOM (Document Object Model) >> - Styleable form controls with CSS. >> - Drosera (A JavaScript debugger for WebKit that can be used >> with any application that uses WebKit) >> - Enhanced Rich Text Editing. >> - XML techologies support, including XPath, SVG and >> XSLTProcessor >> (JavaScript API for XSLT). >> - Netscape-style (NPAPI) plugins support. >> - WebKit embedding API (provides clients with a public API >> for loading, displaying and manipulating Web content.) >> WebKit is featured with AT-SPI accessibility layer since >> version 1.0.1. >> Gnome accessibility team are working hard with WebKit team to >> ensure Webkit >> is accessible when gnome 2.26 comes out. >> >> 4.5. Interfaces: >> >> Exported interfaces: >> Interface Stability >> Comment >> --------------------------------------------------------------------------------- >> >> SUNWwebkit Uncommitted SVr4 >> package SUNWwebkit-devel Uncommitted >> SVr4 package >> /usr/lib/libwebkit-1.0.so.1 Volatile webkit >> lib /usr/lib/${MACH64}/libwebkit-1.0.so.1 Volatile >> 64bit webkit lib /usr/include/webkit-1.0 >> Volatile webkit head file directory >> /usr/lib/pkgconfig/webkit-1.0.pc Uncommitted webkit pc >> file >> /usr/lib/${MACH64}/pkgconfig/webkit-1.0.pc Uncommitted webkit pc >> file >> $HOME/.local/share/webkit Project Private >> client-side database storage >> (see >> reference 2 for detail) >> >> >> Imported Interfaces Interface >> Stability Comments >> ------------------------------------------------------------------------------------ >> >> ATK,gtk+,Cairo,Pango Committed >> LSARC/2007/520 libtiff, libjpeg and libpng >> Volatile LSARC/2003/085 >> librsvg Consolidation >> LSARC/2001/352 >> Private Apache >> Standard C++ Library Committed PSARC/2008/549 >> cURL Uncommitted PSARC/2007/165 >> IDN Uncommitted >> PSARC/2007/167 >> International Components for Unicode Contract External >> PSARC/2005/041 >> SQLite Committed >> PSARC/2008/120 >> libxml2 Standard >> PSARC/2001/175 >> zlib Standard >> PSARC/2006/537 >> >> 4.9. I18N/L10N Impact: >> The JDS team and the G11N are working together to evaluate >> I18N/L10N support >> 4.10. Packaging & Delivery: >> The project will be delivering the following packages: >> SUNWwebkit >> SUNWwebkit-devel >> 4.11. Security Impact: >> In the future, the WebKit community plans that WebKit/GTK+ will >> use cURL >> and then OpenSSL library to verify the peer's certificates for >> HTTPS >> connections. However, this feature is not implemented yet. >> 5. Reference Documents: >> 1.SUNWwebkit,SUNWwebkit-devel >> pkgmap >> pkginfo >> depend >> >> 2.XDG Base Directory Specification >> http://standards.freedesktop.org/basedir-spec/latest/ar01s03.html >> 3.WebKit community >> http://webkit.org/ >> 4.WebKit wiki page http://trac.webkit.org/wiki >> >> >> 6. Resources and Schedule >> 6.4. Steering Committee requested information >> 6.4.1. Consolidation C-team Name: >> Desktop >> 6.5. ARC review type: FastTrack >> 6.6. ARC Exposure: open >> >> > > ------------------------------------------------------------------------ > > _______________________________________________ > opensolaris-arc mailing list > opensolaris-arc@opensolaris.org From Chris.Wang@sun.com Sun Dec 28 23:55:42 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mBT7tfou024444 for ; Sun, 28 Dec 2008 23:55:42 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mBT7tfS4016270 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Sun, 28 Dec 2008 23:55:41 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KCM00103OONLY00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Sun, 28 Dec 2008 23:55:35 -0800 (PST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KCM00CD3OOL4P90@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Sun, 28 Dec 2008 23:55:34 -0800 (PST) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mBT7tXr7023248 for ; Mon, 29 Dec 2008 07:55:33 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0KCM00A01ONY6R00@mail-apac.sun.com> (original mail from Chris.Wang@Sun.COM) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Mon, 29 Dec 2008 15:55:33 +0800 (SGT) Received: from [129.158.217.66] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0KCM003D9OOK7M03@mail-apac.sun.com>; Mon, 29 Dec 2008 15:55:33 +0800 (SGT) Date: Mon, 29 Dec 2008 15:41:32 +0800 From: C Wang Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <495119D0.9070209@gmail.com> Sender: Chris.Wang@sun.com To: Mark Martin Cc: Irene Huang , Shi-Ying Irene Huang , LSARC-ext@sun.com, Alfred.Peng@sun.com Message-id: <49587F2C.1080808@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=UTF-8 Content-transfer-encoding: 8BIT X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <494B4F5D.6010409@sun.com> <495119D0.9070209@gmail.com> User-Agent: Thunderbird 2.0.0.17 (X11/20081119) Status: RO Content-Length: 5818 Mark Martin 写道: > Irene Huang wrote: >> Hi, All >> >> Attached are the pkgmaps for SUNWwebkit and SUNWwebkit-devel >> >> --Irene >> Shi-Ying Irene Huang wrote: >>> Template Version: @(#)sac_nextcase %I% %G% SMI >>> This information is Copyright 2008 Sun Microsystems >>> 1. Introduction >>> 1.1. Project/Component Working Name: >>> WebKit >>> 1.2. Name of Document Author/Supplier: >>> Author: Chris Wang >>> 1.3 Date of This Document: >>> 18 December, 2008 >>> 4. Technical Description >>> 1. Introduction >>> 1.1. Project/Component Working Name: Webkit 1.0.3 for Solaris 1.2. >>> Name of Document Author/Supplier: Chris Wang 1.3. Date of This >>> Document: 12/10/08 > > This looks fine to me, so I'd +1 this. I'm not a member, so that may > not be worth very much. I'm also assuming it is SOP to deliver the .pc > files. > No, the only .pc file webkit supplied is webkit-1.0.pc. Thanks, Chris >>> 1.5. Email Aliases: >>> 1.5.1. Responsible Manager: leo.binchy@sun.com >>> 1.5.2. Responsible Engineer: chris.wang@sun.com >>> alfred.peng@sun.com >>> 2. Project Summary >>> 2.1. Project Description: >>> WebKit is an open source web browser engine. It's also the name of >>> the Mac >>> OS X system framework version of the engine that's used by Safari, >>> Dashboard, Mail, and many other OS X applications. WebKit's HTML and >>> JavaScript code began as a branch of the KHTML and KJS libraries >>> from KDE. >>> >>> WebKit is built on top of different widget backend, which includes >>> GTK, Qt, >>> wxWidgets and some others as well. >>> WebKit/GTK+ is a community sub-project maintained mostly by GNOME and >>> GTK+ developers. It's implemented directly on top of GTK+, GLib and >>> GNOME >>> libraries and provides lightweight web viewing and editing features as >>> well as being the basis for complete web browser applications. It >>> supports >>> the latest web standards and offers good performance and memory usage >>> characteristics on the desktop. >>> >>> WebKit/GTK+ is the engine for different GNOME applications to depend >>> on, >>> devhelp/yelp for example. >>> >>> WebKit is open source software with portions licensed under the LGPL >>> and BSD licenses. >>> The release schedule for WebKit will be matched with GNOME's 6-month >>> release cycle. Currently, GNOME applications including devhelp/epiphany >>> have switched to link against WebKit. >>> >>> The latest development snapshot, and eventually stable versions of >>> Webkit are available at http://webkit.org. >>> 4. Technical Description: >>> 4.1. Details: >>> WebKit has the following features: >>> - CSS 2.1, CSS3 support. >>> - DOM (Document Object Model) >>> - Styleable form controls with CSS. >>> - Drosera (A JavaScript debugger for WebKit that can be used >>> with any application that uses WebKit) >>> - Enhanced Rich Text Editing. >>> - XML techologies support, including XPath, SVG and XSLTProcessor >>> (JavaScript API for XSLT). >>> - Netscape-style (NPAPI) plugins support. >>> - WebKit embedding API (provides clients with a public API for >>> loading, displaying and manipulating Web content.) WebKit is >>> featured with AT-SPI accessibility layer since version 1.0.1. >>> Gnome accessibility team are working hard with WebKit team to ensure >>> Webkit >>> is accessible when gnome 2.26 comes out. >>> >>> 4.5. Interfaces: >>> Exported interfaces: >>> Interface Stability Comment >>> --------------------------------------------------------------------------------- >>> >>> SUNWwebkit Uncommitted SVr4 package SUNWwebkit-devel Uncommitted >>> SVr4 package >>> /usr/lib/libwebkit-1.0.so.1 Volatile webkit lib >>> /usr/lib/${MACH64}/libwebkit-1.0.so.1 Volatile 64bit webkit lib >>> /usr/include/webkit-1.0 Volatile webkit head file directory >>> /usr/lib/pkgconfig/webkit-1.0.pc Uncommitted webkit pc file >>> /usr/lib/${MACH64}/pkgconfig/webkit-1.0.pc Uncommitted webkit pc file >>> $HOME/.local/share/webkit Project Private client-side database storage >>> (see reference 2 for detail) >>> >>> Imported Interfaces Interface Stability Comments >>> ------------------------------------------------------------------------------------ >>> >>> ATK,gtk+,Cairo,Pango Committed LSARC/2007/520 libtiff, libjpeg and >>> libpng Volatile LSARC/2003/085 >>> librsvg Consolidation LSARC/2001/352 >>> Private Apache Standard C++ Library Committed PSARC/2008/549 cURL >>> Uncommitted PSARC/2007/165 >>> IDN Uncommitted PSARC/2007/167 >>> International Components for Unicode Contract External PSARC/2005/041 >>> SQLite Committed PSARC/2008/120 >>> libxml2 Standard PSARC/2001/175 >>> zlib Standard PSARC/2006/537 >>> >>> 4.9. I18N/L10N Impact: >>> The JDS team and the G11N are working together to evaluate I18N/L10N >>> support >>> 4.10. Packaging & Delivery: >>> The project will be delivering the following packages: >>> SUNWwebkit >>> SUNWwebkit-devel 4.11. Security Impact: >>> In the future, the WebKit community plans that WebKit/GTK+ will use >>> cURL >>> and then OpenSSL library to verify the peer's certificates for HTTPS >>> connections. However, this feature is not implemented yet. >>> 5. Reference Documents: >>> 1.SUNWwebkit,SUNWwebkit-devel pkgmap >>> pkginfo >>> depend >>> >>> 2.XDG Base Directory Specification >>> http://standards.freedesktop.org/basedir-spec/latest/ar01s03.html >>> 3.WebKit community >>> http://webkit.org/ >>> 4.WebKit wiki page http://trac.webkit.org/wiki >>> >>> >>> 6. Resources and Schedule >>> 6.4. Steering Committee requested information >>> 6.4.1. Consolidation C-team Name: >>> Desktop >>> 6.5. ARC review type: FastTrack >>> 6.6. ARC Exposure: open >>> >> >> ------------------------------------------------------------------------ >> >> _______________________________________________ >> opensolaris-arc mailing list >> opensolaris-arc@opensolaris.org > From Irene.Huang@sun.com Mon Dec 29 01:25:08 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mBT9P85p012668 for ; Mon, 29 Dec 2008 01:25:08 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mBT9P8VS024899 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Mon, 29 Dec 2008 01:25:08 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KCM0060TSTVEX00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Mon, 29 Dec 2008 01:25:07 -0800 (PST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KCM00GVTSTTUX80@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Mon, 29 Dec 2008 01:25:06 -0800 (PST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mBT9P5jE027796 for ; Mon, 29 Dec 2008 09:25:05 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0KCM00601SOGLI00@mail-apac.sun.com> (original mail from Irene.Huang@Sun.COM) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Mon, 29 Dec 2008 17:25:05 +0800 (SGT) Received: from [129.158.217.203] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0KCM003RLSTR3K5I@mail-apac.sun.com>; Mon, 29 Dec 2008 17:25:04 +0800 (SGT) Date: Mon, 29 Dec 2008 17:24:59 +0800 From: Irene Huang Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <49587F2C.1080808@sun.com> Sender: Irene.Huang@sun.com To: C Wang Cc: Mark Martin , Shi-Ying Irene Huang , LSARC-ext@sun.com, Alfred.Peng@sun.com Message-id: <4958976B.9030503@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=UTF-8 Content-transfer-encoding: 8BIT X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <494B4F5D.6010409@sun.com> <495119D0.9070209@gmail.com> <49587F2C.1080808@sun.com> User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) Status: RO Content-Length: 6091 Hi, all If there's no objections I would like to close this case as approved. --Irene C Wang wrote: > Mark Martin 写道: >> Irene Huang wrote: >>> Hi, All >>> >>> Attached are the pkgmaps for SUNWwebkit and SUNWwebkit-devel >>> >>> --Irene >>> Shi-Ying Irene Huang wrote: >>>> Template Version: @(#)sac_nextcase %I% %G% SMI >>>> This information is Copyright 2008 Sun Microsystems >>>> 1. Introduction >>>> 1.1. Project/Component Working Name: >>>> WebKit >>>> 1.2. Name of Document Author/Supplier: >>>> Author: Chris Wang >>>> 1.3 Date of This Document: >>>> 18 December, 2008 >>>> 4. Technical Description >>>> 1. Introduction >>>> 1.1. Project/Component Working Name: Webkit 1.0.3 for Solaris 1.2. >>>> Name of Document Author/Supplier: Chris Wang 1.3. Date of This >>>> Document: 12/10/08 >> >> This looks fine to me, so I'd +1 this. I'm not a member, so that may >> not be worth very much. I'm also assuming it is SOP to deliver the >> .pc files. >> > No, the only .pc file webkit supplied is webkit-1.0.pc. > > Thanks, > Chris > >>>> 1.5. Email Aliases: >>>> 1.5.1. Responsible Manager: leo.binchy@sun.com >>>> 1.5.2. Responsible Engineer: chris.wang@sun.com >>>> alfred.peng@sun.com >>>> 2. Project Summary >>>> 2.1. Project Description: >>>> WebKit is an open source web browser engine. It's also the name of >>>> the Mac >>>> OS X system framework version of the engine that's used by Safari, >>>> Dashboard, Mail, and many other OS X applications. WebKit's HTML and >>>> JavaScript code began as a branch of the KHTML and KJS libraries >>>> from KDE. >>>> >>>> WebKit is built on top of different widget backend, which includes >>>> GTK, Qt, >>>> wxWidgets and some others as well. >>>> WebKit/GTK+ is a community sub-project maintained mostly by GNOME and >>>> GTK+ developers. It's implemented directly on top of GTK+, GLib and >>>> GNOME >>>> libraries and provides lightweight web viewing and editing features as >>>> well as being the basis for complete web browser applications. It >>>> supports >>>> the latest web standards and offers good performance and memory usage >>>> characteristics on the desktop. >>>> >>>> WebKit/GTK+ is the engine for different GNOME applications to >>>> depend on, >>>> devhelp/yelp for example. >>>> >>>> WebKit is open source software with portions licensed under the >>>> LGPL and BSD licenses. >>>> The release schedule for WebKit will be matched with GNOME's 6-month >>>> release cycle. Currently, GNOME applications including >>>> devhelp/epiphany >>>> have switched to link against WebKit. >>>> >>>> The latest development snapshot, and eventually stable versions of >>>> Webkit are available at http://webkit.org. >>>> 4. Technical Description: >>>> 4.1. Details: >>>> WebKit has the following features: >>>> - CSS 2.1, CSS3 support. >>>> - DOM (Document Object Model) >>>> - Styleable form controls with CSS. >>>> - Drosera (A JavaScript debugger for WebKit that can be used >>>> with any application that uses WebKit) >>>> - Enhanced Rich Text Editing. >>>> - XML techologies support, including XPath, SVG and XSLTProcessor >>>> (JavaScript API for XSLT). >>>> - Netscape-style (NPAPI) plugins support. >>>> - WebKit embedding API (provides clients with a public API for >>>> loading, displaying and manipulating Web content.) WebKit is >>>> featured with AT-SPI accessibility layer since version 1.0.1. >>>> Gnome accessibility team are working hard with WebKit team to >>>> ensure Webkit >>>> is accessible when gnome 2.26 comes out. >>>> >>>> 4.5. Interfaces: >>>> Exported interfaces: >>>> Interface Stability Comment >>>> --------------------------------------------------------------------------------- >>>> >>>> SUNWwebkit Uncommitted SVr4 package SUNWwebkit-devel Uncommitted >>>> SVr4 package >>>> /usr/lib/libwebkit-1.0.so.1 Volatile webkit lib >>>> /usr/lib/${MACH64}/libwebkit-1.0.so.1 Volatile 64bit webkit lib >>>> /usr/include/webkit-1.0 Volatile webkit head file directory >>>> /usr/lib/pkgconfig/webkit-1.0.pc Uncommitted webkit pc file >>>> /usr/lib/${MACH64}/pkgconfig/webkit-1.0.pc Uncommitted webkit pc file >>>> $HOME/.local/share/webkit Project Private client-side database storage >>>> (see reference 2 for detail) >>>> >>>> Imported Interfaces Interface Stability Comments >>>> ------------------------------------------------------------------------------------ >>>> >>>> ATK,gtk+,Cairo,Pango Committed LSARC/2007/520 libtiff, libjpeg and >>>> libpng Volatile LSARC/2003/085 >>>> librsvg Consolidation LSARC/2001/352 >>>> Private Apache Standard C++ Library Committed PSARC/2008/549 cURL >>>> Uncommitted PSARC/2007/165 >>>> IDN Uncommitted PSARC/2007/167 >>>> International Components for Unicode Contract External PSARC/2005/041 >>>> SQLite Committed PSARC/2008/120 >>>> libxml2 Standard PSARC/2001/175 >>>> zlib Standard PSARC/2006/537 >>>> >>>> 4.9. I18N/L10N Impact: >>>> The JDS team and the G11N are working together to evaluate >>>> I18N/L10N support >>>> 4.10. Packaging & Delivery: >>>> The project will be delivering the following packages: >>>> SUNWwebkit >>>> SUNWwebkit-devel 4.11. Security Impact: >>>> In the future, the WebKit community plans that WebKit/GTK+ will use >>>> cURL >>>> and then OpenSSL library to verify the peer's certificates for HTTPS >>>> connections. However, this feature is not implemented yet. >>>> 5. Reference Documents: >>>> 1.SUNWwebkit,SUNWwebkit-devel pkgmap >>>> pkginfo >>>> depend >>>> >>>> 2.XDG Base Directory Specification >>>> http://standards.freedesktop.org/basedir-spec/latest/ar01s03.html >>>> 3.WebKit community >>>> http://webkit.org/ >>>> 4.WebKit wiki page http://trac.webkit.org/wiki >>>> >>>> >>>> 6. Resources and Schedule >>>> 6.4. Steering Committee requested information >>>> 6.4.1. Consolidation C-team Name: >>>> Desktop >>>> 6.5. ARC review type: FastTrack >>>> 6.6. ARC Exposure: open >>>> >>> >>> ------------------------------------------------------------------------ >>> >>> >>> _______________________________________________ >>> opensolaris-arc mailing list >>> opensolaris-arc@opensolaris.org >> > From danek.duvall@sun.com Mon Dec 29 08:24:10 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mBTGOAh7019603 for ; Mon, 29 Dec 2008 08:24:10 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mBTGO3ki003035 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Mon, 29 Dec 2008 08:24:09 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KCN00M0DC894D00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Mon, 29 Dec 2008 09:24:09 -0700 (MST) Received: from dm-sfbay-01.sfbay.sun.com ([129.145.155.118]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KCN00AXLC88OD90@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Mon, 29 Dec 2008 09:24:08 -0700 (MST) Received: from mumak.SFBay.Sun.COM (mumak.SFBay.Sun.COM [129.146.229.4]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id mBTGO6xQ000008; Mon, 29 Dec 2008 08:24:06 -0800 (PST) Received: from mumak.SFBay.Sun.COM (mumak [127.0.0.1]) by mumak.SFBay.Sun.COM (8.14.3+Sun/8.14.3) with ESMTP id mBTGPlbo015969; Mon, 29 Dec 2008 08:25:47 -0800 (PST) Received: (from dduvall@localhost) by mumak.SFBay.Sun.COM (8.14.3+Sun/8.14.3/Submit) id mBTGPlwb015968; Mon, 29 Dec 2008 08:25:47 -0800 (PST) Date: Mon, 29 Dec 2008 08:25:47 -0800 From: Danek Duvall Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <4958976B.9030503@sun.com> To: Irene Huang Cc: C Wang , Mark Martin , Shi-Ying Irene Huang , LSARC-ext@sun.com, Alfred.Peng@sun.com Message-id: <20081229162547.GA13323@mumak.SFBay.Sun.COM> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <494B4F5D.6010409@sun.com> <495119D0.9070209@gmail.com> <49587F2C.1080808@sun.com> <4958976B.9030503@sun.com> User-Agent: Mutt/1.5.16 (2007-06-27) Status: RO Content-Length: 288 On Mon, Dec 29, 2008 at 05:24:59PM +0800, Irene Huang wrote: > If there's no objections I would like to close this case as approved. Given the Christmas break and the fact that no members +1'ed the case, I'd like for this to run until January 6 (or until there is a +1). Thanks, Danek From Irene.Huang@sun.com Tue Dec 30 18:31:33 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mBV2VWnC025635 for ; Tue, 30 Dec 2008 18:31:32 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mBV2VWMc029340 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 30 Dec 2008 18:31:32 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KCP00I09Z0I8G00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 30 Dec 2008 18:31:30 -0800 (PST) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KCP00HS2Z0GQRB0@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 30 Dec 2008 18:31:29 -0800 (PST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mBV2VRBL011913 for ; Wed, 31 Dec 2008 02:31:28 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0KCP00601YY1VF00@mail-apac.sun.com> (original mail from Irene.Huang@Sun.COM) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 31 Dec 2008 10:31:27 +0800 (SGT) Received: from [129.158.217.203] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0KCP003AOZ0E3KUJ@mail-apac.sun.com>; Wed, 31 Dec 2008 10:31:27 +0800 (SGT) Date: Wed, 31 Dec 2008 10:31:22 +0800 From: Irene Huang Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <20081229162547.GA13323@mumak.SFBay.Sun.COM> Sender: Irene.Huang@sun.com To: Danek Duvall Cc: C Wang , Mark Martin , Shi-Ying Irene Huang , LSARC-ext@sun.com, Alfred.Peng@sun.com Message-id: <495AD97A.3020103@sun.com> MIME-version: 1.0 Content-type: multipart/alternative; boundary="Boundary_(ID_m76Hxa8XYe7glzoRHLL1Rg)" X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <494B4F5D.6010409@sun.com> <495119D0.9070209@gmail.com> <49587F2C.1080808@sun.com> <4958976B.9030503@sun.com> <20081229162547.GA13323@mumak.SFBay.Sun.COM> User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) Status: RO Content-Length: 1577 This is a multi-part message in MIME format. --Boundary_(ID_m76Hxa8XYe7glzoRHLL1Rg) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Fine, I am resetting time out to be 01/06/2009. Thanks --Irene Danek Duvall wrote: > On Mon, Dec 29, 2008 at 05:24:59PM +0800, Irene Huang wrote: > > >> If there's no objections I would like to close this case as approved. >> > > Given the Christmas break and the fact that no members +1'ed the case, I'd > like for this to run until January 6 (or until there is a +1). > > Thanks, > Danek > --Boundary_(ID_m76Hxa8XYe7glzoRHLL1Rg) Content-type: text/html; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Fine, I am resetting time out to be 01/06/2009.

Thanks

--Irene
Danek Duvall wrote: 
On Mon, Dec 29, 2008 at 05:24:59PM +0800, Irene Huang wrote:

  
If there's no objections I would like to close this case as approved.
    

Given the Christmas break and the fact that no members +1'ed the case, I'd
like for this to run until January 6 (or until there is a +1).

Thanks,
Danek

--Boundary_(ID_m76Hxa8XYe7glzoRHLL1Rg)-- From lists@mcintyreweb.com Fri Jan 2 00:02:13 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0282Cgt019048 for ; Fri, 2 Jan 2009 00:02:13 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n028215R025475; Fri, 2 Jan 2009 08:02:09 GMT Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KCU0000P3NI2200@nwk-avmta-2.sfbay.sun.com>; Fri, 02 Jan 2009 00:02:06 -0800 (PST) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KCU00CS43NH4W50@nwk-avmta-2.sfbay.sun.com>; Fri, 02 Jan 2009 00:02:05 -0800 (PST) Received: from relay21.sun.com (relay21.sun.com [192.12.251.24] (may be forged)) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n027wmMw001577; Fri, 02 Jan 2009 08:02:05 +0000 (GMT) Received: from mms23es.mms.us.syntegra.com ([150.143.232.50] [150.143.232.50]) by relay21i.sun.com with ESMTP id BT-MMP-2254333; Fri, 02 Jan 2009 08:00:05 +0000 (Z) Received: from relay21.sun.com (relay21.sun.com [192.12.251.24]) by mms23es.mms.us.syntegra.com with ESMTP id BT-MMP-38735224; Fri, 02 Jan 2009 08:00:04 +0000 (Z) Received: from external.mcintyreweb.com ([64.166.3.75] [64.166.3.75]) by relay21i.sun.com with ESMTP id BT-MMP-48546614; Fri, 02 Jan 2009 08:00:04 +0000 (Z) Received: from twins.local (internal [64.166.3.74]) by external.mcintyreweb.com (8.13.7+Sun/8.13.7) with ESMTP id n02803jj026619; Fri, 02 Jan 2009 00:00:03 -0800 (PST) Date: Thu, 01 Jan 2009 23:59:57 -0800 From: Hugh McIntyre Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> To: Shi-Ying Irene Huang Cc: LSARC-ext@sun.com, Chris.wang@sun.com, Alfred.peng@sun.com Message-id: <495DC97D.70800@mcintyreweb.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Brightmail-Tracker: AAAAAA== X-Antispam: No, score=0.0/5.0, scanned in 0.053sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.19 (Macintosh/20081209) Status: RO Content-Length: 880 Shi-Ying Irene Huang wrote: > 4.11. Security Impact: > In the future, the WebKit community plans that WebKit/GTK+ will use cURL > and then OpenSSL library to verify the peer's certificates for HTTPS > connections. However, this feature is not implemented yet. So does this mean that: - HTTPS is not supported right now? - HTTPS is supported, but does no verification of the server certificate, thus defeating half of the point of HTTPS? - HTTPS is supported and checks the certificates properly, just not via CURL/OpenSSL? - or that WebKit does not do the network accesses itself? As a second security-related question, what's the support plan every time in future that Apple announces a Mac OS security fix that includes an update to it's WebKit? Will OpenSolaris be able to keep up promptly with this? Hugh. (not a LSARC member and thus no vote). From Alfred.Peng@sun.com Sun Jan 4 23:31:17 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n057VGYd010741 for ; Sun, 4 Jan 2009 23:31:16 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n057V93X000447 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Mon, 5 Jan 2009 00:31:16 -0700 (MST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KCZ00N0HM823M00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Mon, 05 Jan 2009 00:31:14 -0700 (MST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KCZ00BK9M80A040@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Mon, 05 Jan 2009 00:31:14 -0700 (MST) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n057VBus024590 for ; Mon, 05 Jan 2009 07:31:11 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0KCZ00B01M78SR00@mail-apac.sun.com> (original mail from Alfred.Peng@Sun.COM) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Mon, 05 Jan 2009 15:31:11 +0800 (SGT) Received: from [192.168.1.71] ([219.75.62.90]) by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0KCZ0037BM7W7MOK@mail-apac.sun.com>; Mon, 05 Jan 2009 15:31:11 +0800 (SGT) Date: Mon, 05 Jan 2009 15:32:28 +0800 From: Alfred Peng Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <495DC97D.70800@mcintyreweb.com> Sender: Alfred.Peng@sun.com To: Hugh McIntyre Cc: Shi-Ying Irene Huang , LSARC-ext@sun.com, Chris.Wang@sun.com Message-id: <4961B78C.6080808@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <495DC97D.70800@mcintyreweb.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1b3pre) Gecko/20081229 Lightning/1.0pre Thunderbird/3.0b1 Status: RO Content-Length: 1639 Hi Hugh, On 01/02/09 15:59, Hugh McIntyre wrote: > Shi-Ying Irene Huang wrote: >> 4.11. Security Impact: >> In the future, the WebKit community plans that WebKit/GTK+ will >> use cURL >> and then OpenSSL library to verify the peer's certificates for >> HTTPS >> connections. However, this feature is not implemented yet. > > So does this mean that: > > - HTTPS is not supported right now? > - HTTPS is supported, but does no verification of the server > certificate, thus defeating half of the point of HTTPS? > - HTTPS is supported and checks the certificates properly, just not > via CURL/OpenSSL? > - or that WebKit does not do the network accesses itself? The current status for HTTPS support is between option 1 and 2. Normally, WebKit doesn't support HTTPS. But if the environment "WEBKIT_IGNORE_SSL_ERRORS" is set, WebKit will call libcURL function to skip the certificate verification and deal with HTTPS request. OpenSSL isn't involved in this right now. But to enable SSL verification is on the plan. > As a second security-related question, what's the support plan every > time in future that Apple announces a Mac OS security fix that > includes an update to it's WebKit? Will OpenSolaris be able to keep > up promptly with this? > > Hugh. (not a LSARC member and thus no vote). WebKit/GTK+ is part of the WebKit open source efforts which GNOME community takes the initiative. Currently, several GNOME applications migrate to depend on this web browser engine, devhelp/epiphany for example. As for the security fix, we'll work with GNOME community to provide support. Thanks, -Alfred From Stefan.Teleman@sun.com Tue Jan 6 06:42:08 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n06Eg79A003199 for ; Tue, 6 Jan 2009 06:42:08 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n06EfwLa004042; Tue, 6 Jan 2009 14:42:04 GMT Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KD20060N0U4MX00@nwk-avmta-2.sfbay.sun.com>; Tue, 06 Jan 2009 06:42:04 -0800 (PST) Received: from jurassic-x4600.sfbay.sun.com ([129.146.17.63]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KD2006T00U37L00@nwk-avmta-2.sfbay.sun.com>; Tue, 06 Jan 2009 06:42:03 -0800 (PST) Received: from [10.7.250.138] (punchin-client-10-7-250-138.SFBay.Sun.COM [10.7.250.138]) by jurassic-x4600.sfbay.sun.com (8.14.3+Sun/8.14.3) with ESMTP id n06Eg2kI222221; Tue, 06 Jan 2009 06:42:02 -0800 (PST) Date: Tue, 06 Jan 2009 09:42:02 -0500 From: Stefan Teleman Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <4958976B.9030503@sun.com> To: Irene Huang Cc: C Wang , LSARC-ext@sun.com, Shi-Ying Irene Huang , Alfred.Peng@sun.com Reply-to: Stefan Teleman Message-id: <49636DBA.70408@Sun.COM> Organization: Sun Microsystems, Inc. MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <494B4F5D.6010409@sun.com> <495119D0.9070209@gmail.com> <49587F2C.1080808@sun.com> <4958976B.9030503@sun.com> User-Agent: Thunderbird 2.0.0.6 (X11/20070802) Status: RO Content-Length: 317 Irene Huang wrote: >>>>> Private Apache Standard C++ Library Committed PSARC/2008/549 cURL >>>>> Uncommitted PSARC/2007/165 I don't understand this. Is WebKit planning on delivering a private copy of the Apache Standard C++ Library ? --Stefan -- Stefan Teleman Sun Microsystems, Inc. Stefan.Teleman@Sun.COM From lists@mcintyreweb.com Tue Jan 6 09:22:07 2009 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n06HM4oE024122 for ; Tue, 6 Jan 2009 09:22:07 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n06HM0pC018411; Tue, 6 Jan 2009 09:22:02 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KD200F0X88QOI00@nwk-avmta-2.sfbay.sun.com>; Tue, 06 Jan 2009 09:22:02 -0800 (PST) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KD2006QA88P7HC0@nwk-avmta-2.sfbay.sun.com>; Tue, 06 Jan 2009 09:22:01 -0800 (PST) Received: from relay11i.sun.com (ip121.net129179-4.block1.us.syntegra.com [129.179.4.121]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n06HHqOu024730; Tue, 06 Jan 2009 17:22:00 +0000 (GMT) Received: from mmp13es.mmp.us.syntegra.com ([160.41.208.13] [160.41.208.13]) by relay11i.sun.com with ESMTP id BT-MMP-2022319; Tue, 06 Jan 2009 17:22:00 +0000 (Z) Received: from relay13i.sun.com (relay13i.sun.com [129.179.4.123]) by mmp13es.mmp.us.syntegra.com with ESMTP id BT-MMP-185803; Tue, 06 Jan 2009 17:22:00 +0000 (Z) Received: from external.mcintyreweb.com ([64.166.3.75] [64.166.3.75]) by relay1ib.sun.com with ESMTP id BT-MMP-19318508; Tue, 06 Jan 2009 17:21:59 +0000 (Z) Received: from twins.i.mcintyreweb.com (internal [64.166.3.74]) by external.mcintyreweb.com (8.13.7+Sun/8.13.7) with ESMTP id n06HLwLQ000715; Tue, 06 Jan 2009 09:21:58 -0800 (PST) Date: Tue, 06 Jan 2009 09:21:51 -0800 From: Hugh McIntyre Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <4961B78C.6080808@sun.com> To: Alfred Peng Cc: Shi-Ying Irene Huang , LSARC-ext@sun.com, Chris.Wang@sun.com Message-id: <4963932F.6040004@mcintyreweb.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Brightmail-Tracker: AAAAAA== X-Antispam: No, score=-0.2/5.0, scanned in 0.063sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <495DC97D.70800@mcintyreweb.com> <4961B78C.6080808@sun.com> User-Agent: Thunderbird 2.0.0.19 (Macintosh/20081209) Status: RO Content-Length: 1997 Alfred Peng wrote: > > On 01/02/09 15:59, Hugh McIntyre wrote: >> Shi-Ying Irene Huang wrote: >> So does this mean that: >> >> - HTTPS is not supported right now? >> - HTTPS is supported, but does no verification of the server >> certificate, thus defeating half of the point of HTTPS? >> - HTTPS is supported and checks the certificates properly, just not >> via CURL/OpenSSL? >> - or that WebKit does not do the network accesses itself? > The current status for HTTPS support is between option 1 and 2. > Normally, WebKit doesn't support HTTPS. But if the environment > "WEBKIT_IGNORE_SSL_ERRORS" is set, WebKit will call libcURL function to > skip the certificate verification and deal with HTTPS request. OpenSSL > isn't involved in this right now. But to enable SSL verification is on > the plan. Sounds OK, since the out-of-the-box default won't load HTTPS in an unsafe way. Presumably any documentation on "WEBKIT_IGNORE_SSL_ERRORS" will point out that this defeats the security of HTTPS? >> As a second security-related question, what's the support plan every >> time in future that Apple announces a Mac OS security fix that >> includes an update to it's WebKit? Will OpenSolaris be able to keep >> up promptly with this? >> >> Hugh. (not a LSARC member and thus no vote). > WebKit/GTK+ is part of the WebKit open source efforts which GNOME > community takes the initiative. Currently, several GNOME applications > migrate to depend on this web browser engine, devhelp/epiphany for > example. As for the security fix, we'll work with GNOME community to > provide support. OK. My point in mentioning this was mainly that, because of the common usage with Safari et al, any time Apple releases a security fix that includes fixes to WebKit it will be very obvious if Solaris has a fix ready at the same time or not. This will make any lag in security fixes more obvious than non-shared software. Hopefully the GNOME community will not be trailing Apple here. Hugh. From Chris.Wang@sun.com Tue Jan 6 20:03:44 2009 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0743i5M017380 for ; Tue, 6 Jan 2009 20:03:44 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n0743h6h027357 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 6 Jan 2009 20:03:44 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KD300I031Y7DL00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Tue, 06 Jan 2009 21:03:43 -0700 (MST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KD300AZN1Y6RM20@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Tue, 06 Jan 2009 21:03:43 -0700 (MST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n0743fFb029115 for ; Wed, 07 Jan 2009 04:03:41 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0KD300A011XXST00@mail-apac.sun.com> (original mail from Chris.Wang@Sun.COM) for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Wed, 07 Jan 2009 12:03:41 +0800 (SGT) Received: from [129.158.217.66] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0KD3003NG1Y431XH@mail-apac.sun.com>; Wed, 07 Jan 2009 12:03:41 +0800 (SGT) Date: Wed, 07 Jan 2009 11:49:19 +0800 From: C Wang Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <49636DBA.70408@Sun.COM> Sender: Chris.Wang@sun.com To: Stefan Teleman Cc: Irene Huang , LSARC-ext@sun.com, Shi-Ying Irene Huang , Alfred.Peng@sun.com Message-id: <4964263F.2020608@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=UTF-8 Content-transfer-encoding: 8BIT X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <494B4F5D.6010409@sun.com> <495119D0.9070209@gmail.com> <49587F2C.1080808@sun.com> <4958976B.9030503@sun.com> <49636DBA.70408@Sun.COM> User-Agent: Thunderbird 2.0.0.17 (X11/20081119) Status: RO Content-Length: 584 Stefan: This must be a problem of formatting, the line above indicate libsvg is Consolidate private, and the line should be like this from my original document. Apache Standard C++ Library Committed PSARC/2008/549 We are going to depend one the apache stdcxx on /usr/stdcxx Thanks, Chris Stefan Teleman 写道: > > > Irene Huang wrote: > >>>>>> Private Apache Standard C++ Library Committed PSARC/2008/549 cURL >>>>>> Uncommitted PSARC/2007/165 > > I don't understand this. Is WebKit planning on delivering a private > copy of the Apache Standard C++ Library ? > > --Stefan > From Alfred.Peng@sun.com Tue Jan 6 20:31:36 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n074VZM6004110 for ; Tue, 6 Jan 2009 20:31:35 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n074VVj7026315 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Wed, 7 Jan 2009 12:31:34 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KD300E0138GK600@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 06 Jan 2009 20:31:28 -0800 (PST) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KD3001LM38EM780@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 06 Jan 2009 20:31:27 -0800 (PST) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n074VPMb020017 for ; Wed, 07 Jan 2009 04:31:25 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0KD300501381UA00@mail-apac.sun.com> (original mail from Alfred.Peng@Sun.COM) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 07 Jan 2009 12:31:25 +0800 (SGT) Received: from [192.168.1.71] ([219.75.62.90]) by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0KD3003FL38D7MHR@mail-apac.sun.com>; Wed, 07 Jan 2009 12:31:25 +0800 (SGT) Date: Wed, 07 Jan 2009 12:32:48 +0800 From: Alfred Peng Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <4963932F.6040004@mcintyreweb.com> Sender: Alfred.Peng@sun.com To: Hugh McIntyre Cc: Shi-Ying Irene Huang , LSARC-ext@sun.com, Chris.Wang@sun.com Message-id: <49643070.70807@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <495DC97D.70800@mcintyreweb.com> <4961B78C.6080808@sun.com> <4963932F.6040004@mcintyreweb.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1b3pre) Gecko/20081229 Lightning/1.0pre Thunderbird/3.0b1 Status: RO Content-Length: 1176 On 01/07/09 01:21, Hugh McIntyre wrote: > Alfred Peng wrote: >> >> On 01/02/09 15:59, Hugh McIntyre wrote: >>> Shi-Ying Irene Huang wrote: >>> So does this mean that: >>> >>> - HTTPS is not supported right now? >>> - HTTPS is supported, but does no verification of the server >>> certificate, thus defeating half of the point of HTTPS? >>> - HTTPS is supported and checks the certificates properly, just not >>> via CURL/OpenSSL? >>> - or that WebKit does not do the network accesses itself? >> The current status for HTTPS support is between option 1 and 2. >> Normally, WebKit doesn't support HTTPS. But if the environment >> "WEBKIT_IGNORE_SSL_ERRORS" is set, WebKit will call libcURL function >> to skip the certificate verification and deal with HTTPS request. >> OpenSSL isn't involved in this right now. But to enable SSL >> verification is on the plan. > > Sounds OK, since the out-of-the-box default won't load HTTPS in an > unsafe way. Presumably any documentation on "WEBKIT_IGNORE_SSL_ERRORS" > will point out that this defeats the security of HTTPS? > There isn't document for this right now. Maybe man page is a good place to add this? Thanks, -Alfred From Brian.Cameron@sun.com Tue Jan 6 20:43:36 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n074hZc4004169 for ; Tue, 6 Jan 2009 20:43:36 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n074hT0u004458 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Wed, 7 Jan 2009 12:43:35 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KD300F053SKAE00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 06 Jan 2009 20:43:32 -0800 (PST) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KD3001P33SJM080@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 06 Jan 2009 20:43:32 -0800 (PST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n074hVr8028266 for ; Wed, 07 Jan 2009 04:43:31 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0KD300B013JHE300@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 06 Jan 2009 21:43:31 -0700 (MST) Received: from [10.0.0.7] ([24.32.67.166]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0KD300CZS3SFK1E0@mail-amer.sun.com>; Tue, 06 Jan 2009 21:43:31 -0700 (MST) Date: Tue, 06 Jan 2009 20:43:35 -0600 From: Brian Cameron Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <4964263F.2020608@sun.com> Sender: Brian.Cameron@sun.com To: C Wang Cc: Irene Huang , LSARC-ext@sun.com, Shi-Ying Irene Huang , Alfred.Peng@sun.com Message-id: <496416D7.3010105@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=UTF-8 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <494B4F5D.6010409@sun.com> <495119D0.9070209@gmail.com> <49587F2C.1080808@sun.com> <4958976B.9030503@sun.com> <49636DBA.70408@Sun.COM> <4964263F.2020608@sun.com> User-Agent: Thunderbird 2.0.0.18 (X11/20081215) Status: RO Content-Length: 1279 At the ARC meeting today, a few questions were raised. I'm hoping the project team can provide some clarity on these points: 1) How is WebKit presented to the user? Is it a standalone program that users can run, or is it only embedded in various GNOME programs that use it's embedded browsing capabilities, or both? For example, I believe it is going to be used by the GNOME help browser, yelp, for navigating help documentation. Could the project team explain in more detail what uses WebKit and how it presents itself to the end user? 2) Exactly how does WebKit fail when a user tries to access a HTTPS website. Since it is not built with HTTPS support, ARC wants to make sure that it doesn't in any way mislead the user. A user should not be misled into thinking it is working when it is not. In other words, it should be clear to the end user that when they try to visit a HTTPS website with WebKit that it doesn't work. It should also be usable, so it shouldn't just crash or similar. Does it pop up a dialog informing the user about the issue? Or is this a non-issue since it is only being provided for the purposes of programs like yelp which use its embedded browsing features? Thanks, Brian From Alfred.Peng@sun.com Tue Jan 6 21:17:30 2009 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n075HUu4004822 for ; Tue, 6 Jan 2009 21:17:30 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n075HTv0001751 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 6 Jan 2009 21:17:30 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KD300L035D3RB00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 06 Jan 2009 21:17:27 -0800 (PST) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KD300I4T5D2NU20@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 06 Jan 2009 21:17:27 -0800 (PST) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n075HPQP023172 for ; Wed, 07 Jan 2009 05:17:25 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0KD300F015A3GO00@mail-apac.sun.com> (original mail from Alfred.Peng@Sun.COM) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 07 Jan 2009 13:17:25 +0800 (SGT) Received: from [192.168.1.71] ([219.75.62.90]) by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0KD300GFW5CND549@mail-apac.sun.com>; Wed, 07 Jan 2009 13:17:13 +0800 (SGT) Date: Wed, 07 Jan 2009 13:18:35 +0800 From: Alfred Peng Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <496416D7.3010105@sun.com> Sender: Alfred.Peng@sun.com To: Brian Cameron Cc: C Wang , Irene Huang , LSARC-ext@sun.com, Shi-Ying Irene Huang Message-id: <49643B2B.70103@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=UTF-8 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <494B4F5D.6010409@sun.com> <495119D0.9070209@gmail.com> <49587F2C.1080808@sun.com> <4958976B.9030503@sun.com> <49636DBA.70408@Sun.COM> <4964263F.2020608@sun.com> <496416D7.3010105@sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1b3pre) Gecko/20081229 Lightning/1.0pre Thunderbird/3.0b1 Status: RO Content-Length: 2283 Hi Brian, Please see my comments below: On 01/07/09 10:43, Brian Cameron wrote: > > At the ARC meeting today, a few questions were raised. I'm hoping the > project team can provide some clarity on these points: > > 1) How is WebKit presented to the user? Is it a standalone program that > users can run, or is it only embedded in various GNOME programs that > use it's embedded browsing capabilities, or both? For example, I > believe it is going to be used by the GNOME help browser, yelp, for > navigating help documentation. Could the project team explain in > more detail what uses WebKit and how it presents itself to the end > user? WebKit is a web browser engine, which serves as the dependent library for GNOME applications. It's only embedded in GNOME applications for navigating help documentation. There isn't a standalone program shipped with WebKit. The GNOME applications shipped in Solaris which will depend on WebKit includes the following: yelp, devhelp, Evolution, Pidgin. All of them are irrelevant to HTTPS and are the GUI applications that users can access to. > 2) Exactly how does WebKit fail when a user tries to access a HTTPS > website. Since it is not built with HTTPS support, ARC wants to > make sure that it doesn't in any way mislead the user. A user > should not be misled into thinking it is working when it is not. > > In other words, it should be clear to the end user that when they try > to visit a HTTPS website with WebKit that it doesn't work. It should > also be usable, so it shouldn't just crash or similar. Does it pop > up a dialog informing the user about the issue? I tried to build epiphany (a browser GUI application which we don't ship) with WebKit. When accessing HTTPS website, epiphany will try to load the page. But only blank page will be displayed in the browser window and no error dialog shows up. Users can open new tab to access other normal website at the same time. > Or is this a non-issue since it is only being provided for the > purposes of programs like yelp which use its embedded browsing > features? I think it's a non-issue for Solaris as all the applications only use the embedded browsing features. Regards, -Alfred > > Thanks, > > Brian From Alan.Coopersmith@sun.com Wed Jan 7 07:47:14 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n07FlEPp021140 for ; Wed, 7 Jan 2009 07:47:14 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n07FlC5h036718 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Wed, 7 Jan 2009 08:47:14 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KD300C1BYILKS00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 07 Jan 2009 07:47:09 -0800 (PST) Received: from sca-es-mail-2.sun.com ([192.18.43.133]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KD3000DJYIJQUE0@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 07 Jan 2009 07:47:07 -0800 (PST) Received: from fe-sfbay-09.sun.com ([192.18.43.129]) by sca-es-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n07Fl7xs006341 for ; Wed, 07 Jan 2009 07:47:07 -0800 (PST) Received: from conversion-daemon.fe-sfbay-09.sun.com by fe-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0KD300L01YBZKO00@fe-sfbay-09.sun.com> (original mail from Alan.Coopersmith@Sun.COM) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 07 Jan 2009 07:47:07 -0800 (PST) Received: from [10.6.102.118] by fe-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0KD300CWIYII8FB0@fe-sfbay-09.sun.com>; Wed, 07 Jan 2009 07:47:07 -0800 (PST) Date: Wed, 07 Jan 2009 07:47:06 -0800 From: Alan Coopersmith Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <49643B2B.70103@sun.com> Sender: Alan.Coopersmith@sun.com To: Alfred Peng Cc: Brian Cameron , C Wang , Irene Huang , LSARC-ext@sun.com, Shi-Ying Irene Huang Message-id: <4964CE7A.8030704@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=UTF-8 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Enigmail-Version: 0.95.1 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <494B4F5D.6010409@sun.com> <495119D0.9070209@gmail.com> <49587F2C.1080808@sun.com> <4958976B.9030503@sun.com> <49636DBA.70408@Sun.COM> <4964263F.2020608@sun.com> <496416D7.3010105@sun.com> <49643B2B.70103@sun.com> User-Agent: Thunderbird 2.0.0.6 (X11/20071119) Status: RO Content-Length: 693 Alfred Peng wrote: >> Or is this a non-issue since it is only being provided for the >> purposes of programs like yelp which use its embedded browsing >> features? > I think it's a non-issue for Solaris as all the applications only use > the embedded browsing features. Sounds like it's a non-issue only if it's only provided as a private interface, not something users can build their own applications (like Epiphany) against, and as long as clients like Evolution only use it for rendering documentation, and not say, HTML e-mails, that may reference remote sites. -- -Alan Coopersmith- alan.coopersmith@sun.com Sun Microsystems, Inc. - X Window System Engineering From Chris.Wang@sun.com Wed Jan 7 23:14:02 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n087E1oX027690 for ; Wed, 7 Jan 2009 23:14:01 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n087Dffo022754 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 8 Jan 2009 07:14:00 GMT Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KD50030J5F96100@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 07 Jan 2009 23:13:57 -0800 (PST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KD500M4L5F8ZQ30@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 07 Jan 2009 23:13:57 -0800 (PST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n087DtXb008291 for ; Thu, 08 Jan 2009 07:13:55 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0KD500M0159Y1Y00@mail-apac.sun.com> (original mail from Chris.Wang@Sun.COM) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 08 Jan 2009 15:13:55 +0800 (SGT) Received: from [129.158.217.66] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0KD5003815F64PEU@mail-apac.sun.com>; Thu, 08 Jan 2009 15:13:55 +0800 (SGT) Date: Thu, 08 Jan 2009 14:59:31 +0800 From: C Wang Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <4964CE7A.8030704@sun.com> Sender: Chris.Wang@sun.com To: Alan Coopersmith Cc: Alfred Peng , Brian Cameron , Irene Huang , LSARC-ext@sun.com, Shi-Ying Irene Huang Message-id: <4965A453.4030806@sun.com> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_gqzj3nV/NBcnZYy3ufBbsA)" X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <494B4F5D.6010409@sun.com> <495119D0.9070209@gmail.com> <49587F2C.1080808@sun.com> <4958976B.9030503@sun.com> <49636DBA.70408@Sun.COM> <4964263F.2020608@sun.com> <496416D7.3010105@sun.com> <49643B2B.70103@sun.com> <4964CE7A.8030704@sun.com> User-Agent: Thunderbird 2.0.0.17 (X11/20081119) Status: RO Content-Length: 8998 This is a multi-part message in MIME format. --Boundary_(ID_gqzj3nV/NBcnZYy3ufBbsA) Content-type: text/plain; format=flowed; charset=UTF-8 Content-transfer-encoding: 8BIT Alan: Alan Coopersmith 写道: > Alfred Peng wrote: > >>> Or is this a non-issue since it is only being provided for the >>> purposes of programs like yelp which use its embedded browsing >>> features? >>> >> I think it's a non-issue for Solaris as all the applications only use >> the embedded browsing features. >> > > Sounds like it's a non-issue only if it's only provided as a private > interface, not something users can build their own applications (like > Epiphany) against, and as long as clients like Evolution only use it > for rendering documentation, and not say, HTML e-mails, that may > reference remote sites. > > I agree to make the interface Consolidate Private is more proper at the moment. I updated the onepager to reflect this. However, we will make it public when the missing feature (eg. https) implemented. Thanks, Chris --Boundary_(ID_gqzj3nV/NBcnZYy3ufBbsA) Content-type: text/plain; name=onepager_webkit.txt Content-transfer-encoding: 7BIT Content-disposition: inline; filename=onepager_webkit.txt Template Version: %Z%%M% %I% %E% SMI This information is Copyright 2008 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: Webkit 1.0.3 for Solaris 1.2. Name of Document Author/Supplier: Chris Wang 1.3. Date of This Document: 12/10/08 1.5. Email Aliases: 1.5.1. Responsible Manager: leo.binchy@sun.com 1.5.2. Responsible Engineer: chris.wang@sun.com alfred.peng@sun.com 2. Project Summary 2.1. Project Description: WebKit is an open source web browser engine. It's also the name of the Mac OS X system framework version of the engine that's used by Safari, Dashboard, Mail, and many other OS X applications. WebKit's HTML and JavaScript code began as a branch of the KHTML and KJS libraries from KDE. WebKit is built on top of different widget backend, which includes GTK, Qt, wxWidgets and some others as well. WebKit/GTK+ is a community sub-project maintained mostly by GNOME and GTK+ developers. It's implemented directly on top of GTK+, GLib and GNOME libraries and provides lightweight web viewing and editing features as well as being the basis for complete web browser applications. It supports the latest web standards and offers good performance and memory usage characteristics on the desktop. WebKit/GTK+ is the engine for different GNOME applications to depend on, devhelp/yelp for example. WebKit is open source software with portions licensed under the LGPL and BSD licenses. The release schedule for WebKit will be matched with GNOME's 6-month release cycle. Currently, GNOME applications including devhelp/epiphany have switched to link against WebKit. The latest development snapshot, and eventually stable versions of Webkit are available at http://webkit.org. 4. Technical Description: 4.1. Details: WebKit has the following features: - CSS 2.1, CSS3 support. - DOM (Document Object Model) - Styleable form controls with CSS. - Drosera (A JavaScript debugger for WebKit that can be used with any application that uses WebKit) - Enhanced Rich Text Editing. - XML techologies support, including XPath, SVG and XSLTProcessor (JavaScript API for XSLT). - Netscape-style (NPAPI) plugins support. - WebKit embedding API (provides clients with a public API for loading, displaying and manipulating Web content.) WebKit is featured with AT-SPI accessibility layer since version 1.0.1. Gnome accessibility team are working hard with WebKit team to ensure Webkit is accessible when gnome 2.26 comes out. 4.5. Interfaces: Exported interfaces: Interface Stability Comment --------------------------------------------------------------------------------- SUNWwebkit Uncommitted SVr4 package SUNWwebkit-devel Uncommitted SVr4 package /usr/lib/libwebkit-1.0.so.1 Consolidate webkit lib Private /usr/lib/${MACH64}/libwebkit-1.0.so.1 Consolidate 64bit webkit lib Private /usr/include/webkit-1.0 Consolidate webkit head file directory Private /usr/lib/pkgconfig/webkit-1.0.pc Consolidate webkit pc file Private /usr/lib/${MACH64}/pkgconfig/webkit-1.0.pc Consolidate webkit pc file Private $HOME/.local/share/webkit Private client-side database storage (see reference 2 for detail) Imported Interfaces Interface Stability Comments ------------------------------------------------------------------------------------ ATK,gtk+,Cairo,Pango Committed LSARC/2007/520 libtiff, libjpeg and libpng Volatile LSARC/2003/085 librsvg Consolidation LSARC/2001/352 Private Apache Standard C++ Library Committed PSARC/2008/549 cURL Uncommitted PSARC/2007/165 IDN Uncommitted PSARC/2007/167 International Components for Unicode Contract External PSARC/2005/041 SQLite Committed PSARC/2008/120 libxml2 Standard PSARC/2001/175 zlib Standard PSARC/2006/537 4.9. I18N/L10N Impact: The JDS team and the G11N are working together to evaluate I18N/L10N support 4.10. Packaging & Delivery: The project will be delivering the following packages: SUNWwebkit SUNWwebkit-devel 4.11. Security Impact: In the future, the WebKit community plans that WebKit/GTK+ will use cURL and then OpenSSL library to verify the peer's certificates for HTTPS connections. However, this feature is not implemented yet. 5. Reference Documents: 1.SUNWwebkit,SUNWwebkit-devel pkgmap pkginfo depend 2.XDG Base Directory Specification http://standards.freedesktop.org/basedir-spec/latest/ar01s03.html 3.WebKit community http://webkit.org/ 4.WebKit wiki page http://trac.webkit.org/wiki --Boundary_(ID_gqzj3nV/NBcnZYy3ufBbsA) Content-type: text/plain; name=webkit.diff Content-transfer-encoding: 7BIT Content-disposition: inline; filename=webkit.diff --- onepager_webkit.txt.orig 2009-01-08 14:47:17.868866000 +0800 +++ onepager_webkit.txt 2009-01-08 14:49:53.587288000 +0800 @@ -74,11 +74,16 @@ --------------------------------------------------------------------------------- SUNWwebkit Uncommitted SVr4 package SUNWwebkit-devel Uncommitted SVr4 package - /usr/lib/libwebkit-1.0.so.1 Volatile webkit lib - /usr/lib/${MACH64}/libwebkit-1.0.so.1 Volatile 64bit webkit lib - /usr/include/webkit-1.0 Volatile webkit head file directory - /usr/lib/pkgconfig/webkit-1.0.pc Uncommitted webkit pc file - /usr/lib/${MACH64}/pkgconfig/webkit-1.0.pc Uncommitted webkit pc file + /usr/lib/libwebkit-1.0.so.1 Consolidate webkit lib + Private + /usr/lib/${MACH64}/libwebkit-1.0.so.1 Consolidate 64bit webkit lib + Private + /usr/include/webkit-1.0 Consolidate webkit head file directory + Private + /usr/lib/pkgconfig/webkit-1.0.pc Consolidate webkit pc file + Private + /usr/lib/${MACH64}/pkgconfig/webkit-1.0.pc Consolidate webkit pc file + Private $HOME/.local/share/webkit Private client-side database storage (see reference 2 for detail) --Boundary_(ID_gqzj3nV/NBcnZYy3ufBbsA)-- From Irene.Huang@sun.com Thu Jan 8 16:53:19 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n090rIod020780 for ; Thu, 8 Jan 2009 16:53:18 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n090rIIr053401 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 8 Jan 2009 17:53:18 -0700 (MST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KD60080BIGUXG00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 08 Jan 2009 17:53:18 -0700 (MST) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KD6004CVIGSPY20@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 08 Jan 2009 17:53:18 -0700 (MST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n090rGaS004645 for ; Fri, 09 Jan 2009 00:53:16 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0KD600001IF6SY00@mail-apac.sun.com> (original mail from Irene.Huang@Sun.COM) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 09 Jan 2009 08:53:16 +0800 (SGT) Received: from [129.158.217.203] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0KD600323IGR3KEU@mail-apac.sun.com>; Fri, 09 Jan 2009 08:53:16 +0800 (SGT) Date: Fri, 09 Jan 2009 08:53:12 +0800 From: Irene Huang Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008]: New timeout: 1/23 In-reply-to: <49643070.70807@sun.com> Sender: Irene.Huang@sun.com To: Alfred Peng Cc: Hugh McIntyre , Shi-Ying Irene Huang , LSARC-ext@sun.com, Chris.Wang@sun.com Message-id: <49669FF8.9080307@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <495DC97D.70800@mcintyreweb.com> <4961B78C.6080808@sun.com> <4963932F.6040004@mcintyreweb.com> <49643070.70807@sun.com> User-Agent: Thunderbird 2.0.0.19 (Windows/20081209) Status: RO Content-Length: 1385 There are a lot of discussions, I'd like to rest the time out to be Jan 1/13 (Next Tuesday), in case there's more in next LSARC meeting. Thanks --Irene Alfred Peng wrote: > On 01/07/09 01:21, Hugh McIntyre wrote: >> Alfred Peng wrote: >>> >>> On 01/02/09 15:59, Hugh McIntyre wrote: >>>> Shi-Ying Irene Huang wrote: >>>> So does this mean that: >>>> >>>> - HTTPS is not supported right now? >>>> - HTTPS is supported, but does no verification of the server >>>> certificate, thus defeating half of the point of HTTPS? >>>> - HTTPS is supported and checks the certificates properly, just not >>>> via CURL/OpenSSL? >>>> - or that WebKit does not do the network accesses itself? >>> The current status for HTTPS support is between option 1 and 2. >>> Normally, WebKit doesn't support HTTPS. But if the environment >>> "WEBKIT_IGNORE_SSL_ERRORS" is set, WebKit will call libcURL function >>> to skip the certificate verification and deal with HTTPS request. >>> OpenSSL isn't involved in this right now. But to enable SSL >>> verification is on the plan. >> >> Sounds OK, since the out-of-the-box default won't load HTTPS in an >> unsafe way. Presumably any documentation on "WEBKIT_IGNORE_SSL_ERRORS" >> will point out that this defeats the security of HTTPS? >> > There isn't document for this right now. Maybe man page is a good > place to add this? > > Thanks, > -Alfred From lists@mcintyreweb.com Tue Jan 13 01:15:20 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0D9FIQb029621 for ; Tue, 13 Jan 2009 01:15:20 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n0D9CgWr010386; Tue, 13 Jan 2009 17:15:17 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KDE00C0XKD92Q00@nwk-avmta-2.sfbay.sun.com>; Tue, 13 Jan 2009 01:15:09 -0800 (PST) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KDE003GVKD83ND0@nwk-avmta-2.sfbay.sun.com>; Tue, 13 Jan 2009 01:15:08 -0800 (PST) Received: from relay42i.sun.com ([192.5.209.72]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n0D9F7r1020727; Tue, 13 Jan 2009 09:15:08 +0000 (GMT) Received: from mms48es.mms.us.syntegra.com ([160.41.221.230] [160.41.221.230]) by relay42i.sun.com with ESMTP id BT-MMP-1552839; Tue, 13 Jan 2009 09:15:07 +0000 (Z) Received: from relay43i.sun.com (relay43i.sun.com [192.5.209.74]) by mms48es.mms.us.syntegra.com with ESMTP id BT-MMP-43409553; Tue, 13 Jan 2009 09:15:07 +0000 (Z) Received: from external.mcintyreweb.com ([64.166.3.75] [64.166.3.75]) by relay4i.sun.com with ESMTP id BT-MMP-22157770; Tue, 13 Jan 2009 09:15:07 +0000 (Z) Received: from twins.local (internal [64.166.3.74]) by external.mcintyreweb.com (8.13.7+Sun/8.13.7) with ESMTP id n0D9F5G3024012; Tue, 13 Jan 2009 01:15:05 -0800 (PST) Date: Tue, 13 Jan 2009 01:14:59 -0800 From: Hugh McIntyre Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <49643070.70807@sun.com> To: Alfred Peng Cc: Shi-Ying Irene Huang , LSARC-ext@sun.com, Chris.Wang@sun.com Message-id: <496C5B93.5010401@mcintyreweb.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Brightmail-Tracker: AAAAAA== X-Antispam: No, score=-0.2/5.0, scanned in 0.047sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <495DC97D.70800@mcintyreweb.com> <4961B78C.6080808@sun.com> <4963932F.6040004@mcintyreweb.com> <49643070.70807@sun.com> User-Agent: Thunderbird 2.0.0.19 (Macintosh/20081209) Status: RO Content-Length: 748 Alfred Peng wrote: > On 01/07/09 01:21, Hugh McIntyre wrote: >> Sounds OK, since the out-of-the-box default won't load HTTPS in an >> unsafe way. Presumably any documentation on "WEBKIT_IGNORE_SSL_ERRORS" >> will point out that this defeats the security of HTTPS? >> > There isn't document for this right now. Maybe man page is a good place > to add this? I guess I don't care strongly about this, so the ARC may want to provide a preference. Either: - Provide a safe default (no loading of unsafe HTTPS pages) and don't document this variable anywhere. - or document only to the extent of saying "WEBKIT_IGNORE_SSL_ERRORS exists as an option but breaks security and generally should not be used". Or something along these lines. Hugh. From lists@mcintyreweb.com Tue Jan 13 01:19:31 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0D9JU22029691 for ; Tue, 13 Jan 2009 01:19:30 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n0D9JN2o029358; Tue, 13 Jan 2009 09:19:26 GMT Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KDE00C05KKCE700@nwk-avmta-2.sfbay.sun.com>; Tue, 13 Jan 2009 01:19:24 -0800 (PST) Received: from sca-ea-mail-1.sun.com ([192.18.43.24]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KDE0039GKKB3KE0@nwk-avmta-2.sfbay.sun.com>; Tue, 13 Jan 2009 01:19:23 -0800 (PST) Received: from relay24.sun.com (relay24.sun.com [192.12.251.74] (may be forged)) by sca-ea-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n0D9E9fk004215; Tue, 13 Jan 2009 09:19:23 +0000 (GMT) Received: from mms25es.mms.us.syntegra.com ([150.143.232.90] [150.143.232.90]) by relay24i.sun.com with ESMTP id BT-MMP-2800437; Tue, 13 Jan 2009 09:19:23 +0000 (Z) Received: from relay21.sun.com (relay21.sun.com [192.12.251.24]) by mms25es.mms.us.syntegra.com with ESMTP id BT-MMP-54696228; Tue, 13 Jan 2009 09:19:22 +0000 (Z) Received: from external.mcintyreweb.com ([64.166.3.75] [64.166.3.75]) by relay21i.sun.com with ESMTP id BT-MMP-6571192; Tue, 13 Jan 2009 09:19:22 +0000 (Z) Received: from twins.local (internal [64.166.3.74]) by external.mcintyreweb.com (8.13.7+Sun/8.13.7) with ESMTP id n0D9JKvf024092; Tue, 13 Jan 2009 01:19:21 -0800 (PST) Date: Tue, 13 Jan 2009 01:19:14 -0800 From: Hugh McIntyre Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <49643B2B.70103@sun.com> To: Alfred Peng Cc: Brian Cameron , C Wang , Irene Huang , LSARC-ext@sun.com, Shi-Ying Irene Huang Message-id: <496C5C92.8090800@mcintyreweb.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Brightmail-Tracker: AAAAAA== X-Antispam: No, score=-2.6/5.0, scanned in 0.103sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <494B4F5D.6010409@sun.com> <495119D0.9070209@gmail.com> <49587F2C.1080808@sun.com> <4958976B.9030503@sun.com> <49636DBA.70408@Sun.COM> <4964263F.2020608@sun.com> <496416D7.3010105@sun.com> <49643B2B.70103@sun.com> User-Agent: Thunderbird 2.0.0.19 (Macintosh/20081209) Status: RO Content-Length: 5140 Alfred Peng wrote: > Hi Brian, > > Please see my comments below: > > On 01/07/09 10:43, Brian Cameron wrote: >> 2) Exactly how does WebKit fail when a user tries to access a HTTPS >> website. Since it is not built with HTTPS support, ARC wants to >> make sure that it doesn't in any way mislead the user. A user >> should not be misled into thinking it is working when it is not. >> >> In other words, it should be clear to the end user that when they try >> to visit a HTTPS website with WebKit that it doesn't work. It should >> also be usable, so it shouldn't just crash or similar. Does it pop >> up a dialog informing the user about the issue? > I tried to build epiphany (a browser GUI application which we don't > ship) with WebKit. When accessing HTTPS website, epiphany will try to > load the page. But only blank page will be displayed in the browser > window and no error dialog shows up. Users can open new tab to access > other normal website at the same time. According to a web search, the reason for the debatable "WEBKIT_IGNORE_SSL_ERRORS" option is that although WebKit (and the CURL that this generally uses under the covers) supports HTTPS including certificate checking (sometimes), there's no way in WebKit to popup a dialog message to the user in the same way that Firefox does if the certificate has errors (hostname mismatch, expired, signature error, etc.). There seems to be an other gotcha issue here in that WebKit apparently does not ship with any root certs by default, which would mean there's no way to end up with a passing signature. (CURL may have a default set of certs?) This could presumably be fixed though. The obvious solution would have been "load the page if the cert is OK, otherwise fail". This may in fact be the default if HTTPS support is compiled in in the absence of WEBKIT_IGNORE_SSL_ERRORS, although this is not 100% clear. It's also not clear to me if LSARC/2008/782 is compiled with or without CURL and OpenSSL. It does appear though that the WEBKIT_IGNORE_SSL_ERRORS option is for people with self-signed certificates who otherwise would have no way to load their pages, because of the above-mentioned limitation that there's no way for a WebKit app to pop up a dialog saying "this certificate is in error; do you want to load the page anyway?" Internally this seems to translate as follows: const bool ignoreSSLErrors = getenv("WEBKIT_IGNORE_SSL_ERRORS"); // FIXME: Enable SSL verification when we have a way of // shipping certs and/or reporting SSL errors to the user. if (ignoreSSLErrors) curl_easy_setopt(d->m_handle, CURLOPT_SSL_VERIFYPEER, false); The CURL documentation then says the following for VERIFYPEER (and VERIFYHOST), both of which seem to be things you want to enable. Hugh. _____________________________________________________________________________ CURLOPT_SSL_VERIFYPEER Pass a long as parameter. This option determines whether curl verifies the authenticity of the peer's certificate. A value of 1 means curl verifies; zero means it doesn't. The default is nonzero, but before 7.10, it was zero. When negotiating an SSL connection, the server sends a certificate indicating its identity. Curl verifies whether the certificate is authentic, i.e. that you can trust that the server is who the certificate says it is. This trust is based on a chain of digital signatures, rooted in certification authority (CA) certificates you supply. As of 7.10, curl installs a default bundle of CA certificates and you can specify alternate certificates with the CURLOPT_CAINFO option or the CURLOPT_CAPATH option. When CURLOPT_SSL_VERIFYPEER is nonzero, and the verification fails to prove that the certificate is authentic, the connection fails. When the option is zero, the connection succeeds regardless. Authenticating the certificate is not by itself very useful. You typically want to ensure that the server, as authentically identified by its certificate, is the server you mean to be talking to. Use CURLOPT_SSL_VERIFYHOST to control that. CURLOPT_SSL_VERIFYHOST Pass a long as parameter. This option determines whether libcurl verifies that the server cert is for the server it is known as. When negotiating a SSL connection, the server sends a certificate indicating its identity. When CURLOPT_SSL_VERIFYHOST is 2, that certificate must indicate that the server is the server to which you meant to connect, or the connection fails. Curl considers the server the intended one when the Common Name field or a Subject Alternate Name field in the certificate matches the host name in the URL to which you told Curl to connect. When the value is 1, the certificate must contain a Common Name field, but it doesn't matter what name it says. (This is not ordinarily a useful setting). When the value is 0, the connection succeeds regardless of the names in the certificate. The default, since 7.10, is 2. This option controls checking the server's claimed identity. The server could be lying. To control lying, see CURLOPT_SSL_VERIFYPEER. From Alfred.Peng@sun.com Tue Jan 13 04:58:01 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0DCw0Io020034 for ; Tue, 13 Jan 2009 04:58:00 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n0DCvw7V004839 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 13 Jan 2009 20:57:59 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KDE00B1FUOMYZ00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 13 Jan 2009 05:57:58 -0700 (MST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KDE00BQGUOIRW00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 13 Jan 2009 05:57:56 -0700 (MST) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n0DCvsM9015961 for ; Tue, 13 Jan 2009 12:57:54 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0KDE00501UO36E00@mail-apac.sun.com> (original mail from Alfred.Peng@Sun.COM) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 13 Jan 2009 20:57:53 +0800 (SGT) Received: from [192.168.1.71] ([116.15.185.152]) by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0KDE00DRZUOEXBWF@mail-apac.sun.com>; Tue, 13 Jan 2009 20:57:53 +0800 (SGT) Date: Tue, 13 Jan 2009 20:59:20 +0800 From: Alfred Peng Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <496C5C92.8090800@mcintyreweb.com> Sender: Alfred.Peng@sun.com To: Hugh McIntyre Cc: Brian Cameron , C Wang , Irene Huang , LSARC-ext@sun.com, Shi-Ying Irene Huang Message-id: <496C9028.2080205@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <494B4F5D.6010409@sun.com> <495119D0.9070209@gmail.com> <49587F2C.1080808@sun.com> <4958976B.9030503@sun.com> <49636DBA.70408@Sun.COM> <4964263F.2020608@sun.com> <496416D7.3010105@sun.com> <49643B2B.70103@sun.com> <496C5C92.8090800@mcintyreweb.com> User-Agent: Thunderbird 2.0.0.18 (X11/20081203) Status: RO Content-Length: 6433 Hi Hugh, Thanks for the comments. Hugh McIntyre wrote: > Alfred Peng wrote: >> Hi Brian, >> >> Please see my comments below: >> >> On 01/07/09 10:43, Brian Cameron wrote: >>> 2) Exactly how does WebKit fail when a user tries to access a HTTPS >>> website. Since it is not built with HTTPS support, ARC wants to >>> make sure that it doesn't in any way mislead the user. A user >>> should not be misled into thinking it is working when it is not. >>> >>> In other words, it should be clear to the end user that when they >>> try >>> to visit a HTTPS website with WebKit that it doesn't work. It >>> should >>> also be usable, so it shouldn't just crash or similar. Does it pop >>> up a dialog informing the user about the issue? >> I tried to build epiphany (a browser GUI application which we don't >> ship) with WebKit. When accessing HTTPS website, epiphany will try to >> load the page. But only blank page will be displayed in the browser >> window and no error dialog shows up. Users can open new tab to access >> other normal website at the same time. > > According to a web search, the reason for the debatable > "WEBKIT_IGNORE_SSL_ERRORS" option is that although WebKit (and the > CURL that this generally uses under the covers) supports HTTPS > including certificate checking (sometimes), there's no way in WebKit > to popup a dialog message to the user in the same way that Firefox > does if the certificate has errors (hostname mismatch, expired, > signature error, etc.). Firefox depends on NSS for certs verification. Besides, it provides a way for users to add exception when the server side certificate fails to verify. I doubt WebKit, as a library, should do the work to pop up a dialog. Maybe the applications which depend on WebKit should implement this. > There seems to be an other gotcha issue here in that WebKit apparently > does not ship with any root certs by default, which would mean there's > no way to end up with a passing signature. (CURL may have a default > set of certs?) This could presumably be fixed though. The libcurl is the HTTP backend for WebKit. It could enable OpenSSL, gnutls or NSS for https handling and specify the CA bundle to use. From libcurl's ARC (PSARC/2007/165), the libcurl shipped in Solaris is built with system OpenSSL. I think it can use OpenSSL's certificate for verification. But there is a bug: /etc/sfw/openssl/certs has no well known CA certificates (bugster CR#6661895) so that certificate verification isn't supported. > The obvious solution would have been "load the page if the cert is OK, > otherwise fail". This may in fact be the default if HTTPS support is > compiled in in the absence of WEBKIT_IGNORE_SSL_ERRORS, although this > is not 100% clear. It's also not clear to me if LSARC/2008/782 is > compiled with or without CURL and OpenSSL. It does appear though that > the WEBKIT_IGNORE_SSL_ERRORS option is for people with self-signed > certificates who otherwise would have no way to load their pages, > because of the above-mentioned limitation that there's no way for a > WebKit app to pop up a dialog saying "this certificate is in error; do > you want to load the page anyway?" WebKit will build with libcurl which in turn links against OpenSSL. WebKit doesn't link with OpenSSL directly. > Internally this seems to translate as follows: > > const bool ignoreSSLErrors = getenv("WEBKIT_IGNORE_SSL_ERRORS"); > > // FIXME: Enable SSL verification when we have a way of > // shipping certs and/or reporting SSL errors to the user. > if (ignoreSSLErrors) > curl_easy_setopt(d->m_handle, CURLOPT_SSL_VERIFYPEER, false); > > The CURL documentation then says the following for VERIFYPEER (and > VERIFYHOST), both of which seem to be things you want to enable. To enable the certs verification, either the bug #6661895 needs to be fixed first, or the certs are shipped in WebKit or libcurl. I'm personally not a fan for the second choice. Regards, -Alfred > Hugh. > > _____________________________________________________________________________ > > > CURLOPT_SSL_VERIFYPEER > > Pass a long as parameter. > > This option determines whether curl verifies the authenticity of the > peer's certificate. A value of 1 means curl verifies; zero means it > doesn't. The default is nonzero, but before 7.10, it was zero. > > When negotiating an SSL connection, the server sends a certificate > indicating its identity. Curl verifies whether the certificate is > authentic, i.e. that you can trust that the server is who the > certificate says it is. This trust is based on a chain of digital > signatures, rooted in certification authority (CA) certificates you > supply. As of 7.10, curl installs a default bundle of CA certificates > and you can specify alternate certificates with the CURLOPT_CAINFO > option or the CURLOPT_CAPATH option. > > When CURLOPT_SSL_VERIFYPEER is nonzero, and the verification fails to > prove that the certificate is authentic, the connection fails. When > the option is zero, the connection succeeds regardless. > > Authenticating the certificate is not by itself very useful. You > typically want to ensure that the server, as authentically identified > by its certificate, is the server you mean to be talking to. Use > CURLOPT_SSL_VERIFYHOST to control that. > > CURLOPT_SSL_VERIFYHOST > > Pass a long as parameter. > > This option determines whether libcurl verifies that the server cert > is for the server it is known as. > > When negotiating a SSL connection, the server sends a certificate > indicating its identity. > > When CURLOPT_SSL_VERIFYHOST is 2, that certificate must indicate that > the server is the server to which you meant to connect, or the > connection fails. > > Curl considers the server the intended one when the Common Name field > or a Subject Alternate Name field in the certificate matches the host > name in the URL to which you told Curl to connect. > > When the value is 1, the certificate must contain a Common Name field, > but it doesn't matter what name it says. (This is not ordinarily a > useful setting). > > When the value is 0, the connection succeeds regardless of the names > in the certificate. > > The default, since 7.10, is 2. > > This option controls checking the server's claimed identity. The > server could be lying. To control lying, see CURLOPT_SSL_VERIFYPEER. From edh@sun.com Wed Jan 14 13:07:39 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0EL7dpk028969 for ; Wed, 14 Jan 2009 13:07:39 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n0EL7Slg039519 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Wed, 14 Jan 2009 14:07:39 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KDH0053PC0QX500@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 14 Jan 2009 13:07:38 -0800 (PST) Received: from sca-es-mail-2.sun.com ([192.18.43.133]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KDH00LLHC0O27D0@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 14 Jan 2009 13:07:36 -0800 (PST) Received: from fe-sfbay-10.sun.com ([192.18.43.129]) by sca-es-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n0EL7a6T000073 for ; Wed, 14 Jan 2009 13:07:36 -0800 (PST) Received: from conversion-daemon.fe-sfbay-10.sun.com by fe-sfbay-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0KDH00301BD9G900@fe-sfbay-10.sun.com> (original mail from edh@sun.com) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 14 Jan 2009 13:07:36 -0800 (PST) Received: from [129.146.72.131] by fe-sfbay-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0KDH00CSHC0M7O60@fe-sfbay-10.sun.com>; Wed, 14 Jan 2009 13:07:35 -0800 (PST) Date: Wed, 14 Jan 2009 13:06:56 -0800 From: Edward Hunter Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008]: New timeout: 1/23 In-reply-to: <49669FF8.9080307@sun.com> Sender: Ed.Hunter@sun.com To: Irene Huang Cc: Alfred Peng , Hugh McIntyre , Shi-Ying Irene Huang , LSARC-ext@sun.com, Chris.Wang@sun.com Message-id: <496E53F0.9000801@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <495DC97D.70800@mcintyreweb.com> <4961B78C.6080808@sun.com> <4963932F.6040004@mcintyreweb.com> <49643070.70807@sun.com> <49669FF8.9080307@sun.com> User-Agent: Thunderbird 2.0.0.17 (X11/20081014) Status: RO Content-Length: 1906 We should not continue to extend the timer ad infinitum. Is it possible for the interested parties to arrange a meeting with Irene to hash out these issues? I would expect the outcome of that call to either be closing the fasttrack or a derailment if possible. Another choice is to schedule an afternoon LSARC meeting so that Irene could attend. I would prefer the first option but can certainly work with the second option. -edh On 01/08/09 16:53, Irene Huang wrote: > There are a lot of discussions, I'd like to rest the time out to be > Jan 1/13 (Next Tuesday), in case there's more in next LSARC meeting. > > Thanks > > --Irene > Alfred Peng wrote: >> On 01/07/09 01:21, Hugh McIntyre wrote: >>> Alfred Peng wrote: >>>> >>>> On 01/02/09 15:59, Hugh McIntyre wrote: >>>>> Shi-Ying Irene Huang wrote: >>>>> So does this mean that: >>>>> >>>>> - HTTPS is not supported right now? >>>>> - HTTPS is supported, but does no verification of the server >>>>> certificate, thus defeating half of the point of HTTPS? >>>>> - HTTPS is supported and checks the certificates properly, just >>>>> not via CURL/OpenSSL? >>>>> - or that WebKit does not do the network accesses itself? >>>> The current status for HTTPS support is between option 1 and 2. >>>> Normally, WebKit doesn't support HTTPS. But if the environment >>>> "WEBKIT_IGNORE_SSL_ERRORS" is set, WebKit will call libcURL >>>> function to skip the certificate verification and deal with HTTPS >>>> request. OpenSSL isn't involved in this right now. But to enable >>>> SSL verification is on the plan. >>> >>> Sounds OK, since the out-of-the-box default won't load HTTPS in an >>> unsafe way. Presumably any documentation on "WEBKIT_IGNORE_SSL_ERRORS" >>> will point out that this defeats the security of HTTPS? >>> >> There isn't document for this right now. Maybe man page is a good >> place to add this? >> >> Thanks, >> -Alfred > From lists@mcintyreweb.com Wed Jan 14 23:37:44 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0F7bhvl018509 for ; Wed, 14 Jan 2009 23:37:43 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n0F7bb3U011008; Thu, 15 Jan 2009 15:37:40 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KDI0090356P4600@nwk-avmta-1.sfbay.Sun.COM>; Wed, 14 Jan 2009 23:37:37 -0800 (PST) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KDI00BA756PRNB0@nwk-avmta-1.sfbay.Sun.COM>; Wed, 14 Jan 2009 23:37:37 -0800 (PST) Received: from relay42i.sun.com ([192.5.209.72]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n0F7baoD001874; Thu, 15 Jan 2009 07:37:37 +0000 (GMT) Received: from mms48es.mms.us.syntegra.com ([160.41.221.230] [160.41.221.230]) by relay42i.sun.com with ESMTP id BT-MMP-1627552; Thu, 15 Jan 2009 07:35:36 +0000 (Z) Received: from relay41i.sun.com (relay41i.sun.com [192.5.209.70]) by mms48es.mms.us.syntegra.com with ESMTP id BT-MMP-45676395; Thu, 15 Jan 2009 07:35:36 +0000 (Z) Received: from external.mcintyreweb.com ([64.166.3.75] [64.166.3.75]) by relay4i.sun.com with ESMTP id BT-MMP-11003925; Thu, 15 Jan 2009 07:35:35 +0000 (Z) Received: from twins.local (internal [64.166.3.74]) by external.mcintyreweb.com (8.13.7+Sun/8.13.7) with ESMTP id n0F7ZYsx015110; Wed, 14 Jan 2009 23:35:34 -0800 (PST) Date: Wed, 14 Jan 2009 23:35:28 -0800 From: Hugh McIntyre Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008] In-reply-to: <496C9028.2080205@sun.com> To: Alfred Peng Cc: Brian Cameron , C Wang , Irene Huang , LSARC-ext@sun.com, Shi-Ying Irene Huang Message-id: <496EE740.7010408@mcintyreweb.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Brightmail-Tracker: AAAAAA== X-Antispam: No, score=-1.1/5.0, scanned in 0.064sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <494B4F5D.6010409@sun.com> <495119D0.9070209@gmail.com> <49587F2C.1080808@sun.com> <4958976B.9030503@sun.com> <49636DBA.70408@Sun.COM> <4964263F.2020608@sun.com> <496416D7.3010105@sun.com> <49643B2B.70103@sun.com> <496C5C92.8090800@mcintyreweb.com> <496C9028.2080205@sun.com> User-Agent: Thunderbird 2.0.0.19 (Macintosh/20081209) Status: RO Content-Length: 1825 Alfred Peng wrote: > Firefox depends on NSS for certs verification. Besides, it provides a > way for users to add exception when the server side certificate fails to > verify. I doubt WebKit, as a library, should do the work to pop up a > dialog. Maybe the applications which depend on WebKit should implement > this. I agree with this (consuming apps need to do any dialogs). More importantly though: it's not in scope for this case for you to need to implement the missing certificate functionality. That's for the upstream WebKit folks. All you need to make sure is that as shipped by default (and without $WEBKIT_IGNORE_SSL_ERRORS being set) that WebKit won't load any insecure HTTPS pages. "Provide a way for users to add an exception" is the difficult bit because the user wants to be able to see the certificate contents in order to decide, and this makes it trickier to design the API. > verification. But there is a bug: /etc/sfw/openssl/certs has no well > known CA certificates (bugster CR#6661895) so that certificate > verification isn't supported. > To enable the certs verification, either the bug #6661895 needs to be > fixed first, or the certs are shipped in WebKit or libcurl. I'm > personally not a fan for the second choice. I don't get a vote on the ARC, but I think you're fine to close this case and ship a version of WebKit which just does not support HTTPS in the first version by default. I.e. "https pages only get loaded if you pass verification, and there's no way verification can pass because of missing certs". Whether and/or where you document WEBKIT_IGNORE_SSL_ERRORS is up to you, provided that if you document this then IMHO you should warn the user that this breaks security. and possibly also say this option is declared obsolete and may go away. Hugh. From lists@mcintyreweb.com Wed Jan 14 23:49:16 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0F7nFXg018546 for ; Wed, 14 Jan 2009 23:49:16 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n0F7n0SQ024452; Thu, 15 Jan 2009 07:49:11 GMT Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KDI003075PU3W00@nwk-avmta-2.sfbay.sun.com>; Wed, 14 Jan 2009 23:49:06 -0800 (PST) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KDI000W35PTEJ10@nwk-avmta-2.sfbay.sun.com>; Wed, 14 Jan 2009 23:49:06 -0800 (PST) Received: from relay11i.sun.com (ip121.net129179-4.block1.us.syntegra.com [129.179.4.121]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n0F7iVU1011794; Thu, 15 Jan 2009 07:49:05 +0000 (GMT) Received: from mmp13es.mmp.us.syntegra.com ([160.41.208.13] [160.41.208.13]) by relay11i.sun.com with ESMTP id BT-MMP-2615231; Thu, 15 Jan 2009 07:49:05 +0000 (Z) Received: from relay12i.sun.com (relay12i.sun.com [129.179.4.122]) by mmp13es.mmp.us.syntegra.com with ESMTP id BT-MMP-278304; Thu, 15 Jan 2009 07:49:05 +0000 (Z) Received: from external.mcintyreweb.com ([64.166.3.75] [64.166.3.75]) by relay1i.sun.com with ESMTP id BT-MMP-4398099; Thu, 15 Jan 2009 07:49:04 +0000 (Z) Received: from twins.local (internal [64.166.3.74]) by external.mcintyreweb.com (8.13.7+Sun/8.13.7) with ESMTP id n0F7n3aS015355; Wed, 14 Jan 2009 23:49:03 -0800 (PST) Date: Wed, 14 Jan 2009 23:48:57 -0800 From: Hugh McIntyre Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008]: New timeout: 1/23 In-reply-to: <496E53F0.9000801@sun.com> To: Edward Hunter Cc: Irene Huang , Alfred Peng , Shi-Ying Irene Huang , LSARC-ext@sun.com, Chris.Wang@sun.com Message-id: <496EEA69.2050703@mcintyreweb.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Brightmail-Tracker: AAAAAA== X-Antispam: No, score=-0.2/5.0, scanned in 0.070sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <495DC97D.70800@mcintyreweb.com> <4961B78C.6080808@sun.com> <4963932F.6040004@mcintyreweb.com> <49643070.70807@sun.com> <49669FF8.9080307@sun.com> <496E53F0.9000801@sun.com> User-Agent: Thunderbird 2.0.0.19 (Macintosh/20081209) Status: RO Content-Length: 1522 Edward Hunter wrote: > We should not continue to extend the timer ad infinitum. Is it possible > for the interested parties to arrange a meeting with Irene to hash out > these issues? I would expect the outcome of that call to either be > closing the fasttrack or a derailment if possible. Another choice is to > schedule an afternoon LSARC meeting so that Irene could attend. I would > prefer the first option but can certainly work with the second option. Personally, despite this and the other email I just sent. I think the questions have been answered. I'm fine if the case is closed. >>>> Sounds OK, since the out-of-the-box default won't load HTTPS in an >>>> unsafe way. Presumably any documentation on "WEBKIT_IGNORE_SSL_ERRORS" >>>> will point out that this defeats the security of HTTPS? >>>> >>> There isn't document for this right now. Maybe man page is a good >>> place to add this? It's not clear from the public materials if you'll be shipping a man page or not. It's also not clear from the webkit.org sources whether these have man pages - it looks like the answer is no. In any case I think it's up to you want to do. If you ship documentation that says "HTTPS is not enabled by default" then it's up to you if you explain why or not. I thin you can either: - not mention WEBKIT_IGNORE_SSL_ERRORS at all. - or if you do mention it, you should say that it's insecure and probably also should be considered obsolete (.ie. may go away in future?). Either option is OK with me. From Irene.Huang@sun.com Thu Jan 15 00:58:48 2009 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0F8wmu2007975 for ; Thu, 15 Jan 2009 00:58:48 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n0F8wk6U026218 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 15 Jan 2009 00:58:47 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KDI00K078XY9R00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 15 Jan 2009 00:58:46 -0800 (PST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KDI00EDU8XWP960@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 15 Jan 2009 00:58:46 -0800 (PST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n0F8wiK3028419 for ; Thu, 15 Jan 2009 08:58:44 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0KDI00F018VRIV00@mail-apac.sun.com> (original mail from Irene.Huang@Sun.COM) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 15 Jan 2009 16:58:44 +0800 (SGT) Received: from [129.158.217.84] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0KDI0039F8XU4PL4@mail-apac.sun.com>; Thu, 15 Jan 2009 16:58:43 +0800 (SGT) Date: Thu, 15 Jan 2009 16:58:40 +0800 From: Irene Huang Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008]: New timeout: 1/23 In-reply-to: <496EEA69.2050703@mcintyreweb.com> Sender: Irene.Huang@sun.com To: Hugh McIntyre Cc: Edward Hunter , Alfred Peng , Shi-Ying Irene Huang , LSARC-ext@sun.com, Chris.Wang@sun.com Message-id: <496EFAC0.5010301@sun.com> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_jyJlWls2TSN3JMhfdglDXw)" X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <495DC97D.70800@mcintyreweb.com> <4961B78C.6080808@sun.com> <4963932F.6040004@mcintyreweb.com> <49643070.70807@sun.com> <49669FF8.9080307@sun.com> <496E53F0.9000801@sun.com> <496EEA69.2050703@mcintyreweb.com> User-Agent: Thunderbird 2.0.0.19 (Windows/20081209) Status: RO Content-Length: 9062 This is a multi-part message in MIME format. --Boundary_(ID_jyJlWls2TSN3JMhfdglDXw) Content-type: multipart/alternative; boundary="Boundary_(ID_/8GCIf0BxLkK+2ST9nxc4g)" --Boundary_(ID_/8GCIf0BxLkK+2ST9nxc4g) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Hi, Hugh Hugh McIntyre wrote: > It's not clear from the public materials if you'll be shipping a man > page or not. It's also not clear from the webkit.org sources whether > these have man pages - it looks like the answer is no. From the pkgmaps attached, the project does not ship manpage for now. > > In any case I think it's up to you want to do. If you ship > documentation that says "HTTPS is not enabled by default" then it's up > to you if you explain why or not. I thin you can either: > > - not mention WEBKIT_IGNORE_SSL_ERRORS at all. > - or if you do mention it, you should say that it's insecure and > probably also should be considered obsolete (.ie. may go away in > future?). in the future if manpage is to be shipped for libwebkit, I'd prefer option two. Alfred and Chris, what's your opinion? Now that most of the questions seem to be answered, I don't see the necessity of having a meeting (if I understand correctly). If there's no objections, I would like to close this case within 24 hours. Thanks for all the comments :) --Irene > > Either option is OK with me. --Boundary_(ID_/8GCIf0BxLkK+2ST9nxc4g) Content-type: text/html; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Hi, Hugh

Hugh McIntyre wrote:
It's not clear from the public materials if you'll be shipping a man page or not.  It's also not clear from the webkit.org sources whether these have man pages - it looks like the answer is no.
From the pkgmaps attached, the project does not ship manpage for now.

In any case I think it's up to you want to do.  If you ship documentation that says "HTTPS is not enabled by default" then it's up to you if you explain why or not.  I thin you can either:

- not mention WEBKIT_IGNORE_SSL_ERRORS at all.

- or if you do mention it, you should say that it's insecure and probably also should be considered obsolete (.ie. may go away in future?).
in the future if manpage is to be shipped for libwebkit, I'd prefer option two.
Alfred and Chris, what's your opinion?

Now that most of the questions seem to be answered, I don't see the necessity of having a meeting (if I understand correctly).
If there's no objections, I would like to close this case within 24 hours.

Thanks for all the comments :)

--Irene

Either option is OK with me.

--Boundary_(ID_/8GCIf0BxLkK+2ST9nxc4g)-- --Boundary_(ID_jyJlWls2TSN3JMhfdglDXw) Content-type: text/plain; name=pkgmap Content-transfer-encoding: 7BIT Content-disposition: inline; filename=pkgmap : 1 69775 1 i copyright 0 0 1229576007 1 i depend 524 45333 1229576007 1 d none lib 0755 root bin 1 d none lib/amd64 0755 root bin 1 s none lib/amd64/libwebkit-1.0.so=libwebkit-1.0.so.1 1 f none lib/amd64/libwebkit-1.0.so.1 0755 root bin 50667780 56005 1229576006 1 s none lib/libwebkit-1.0.so=libwebkit-1.0.so.1 1 f none lib/libwebkit-1.0.so.1 0755 root bin 35681532 25505 1229576006 1 i pkginfo 661 54401 1229576007 --Boundary_(ID_jyJlWls2TSN3JMhfdglDXw) Content-type: text/plain; name=pkgmap Content-transfer-encoding: 7BIT Content-disposition: inline; filename=pkgmap : 1 789 1 i copyright 0 0 1229583614 1 i depend 524 45333 1229583614 1 d none include 0755 root bin 1 d none include/webkit-1.0 0755 root bin 1 d none include/webkit-1.0/JavaScriptCore 0755 root bin 1 d none include/webkit-1.0/JavaScriptCore/API 0755 root bin 1 f none include/webkit-1.0/JavaScriptCore/API/APICast.h 0644 root bin 3543 31714 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSBase.h 0644 root bin 6144 7392 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSBasePrivate.h 0644 root bin 2120 39589 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSCallbackConstructor.h 0644 root bin 2322 56256 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSCallbackFunction.h 0644 root bin 2298 52620 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSCallbackObject.h 0644 root bin 4152 8672 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSCallbackObjectFunctions.h 0644 root bin 20260 55729 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSClassRef.h 0644 root bin 5057 36304 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSContextRef.h 0644 root bin 5183 52175 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSObjectRef.h 0644 root bin 38008 23500 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSProfilerPrivate.h 0644 root bin 2227 47891 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSRetainPtr.h 0644 root bin 5183 18904 1224797495 1 f none include/webkit-1.0/JavaScriptCore/API/JSStringRef.h 0644 root bin 5617 15230 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSStringRefBSTR.h 0644 root bin 2359 55510 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSStringRefCF.h 0644 root bin 2418 62602 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JSValueRef.h 0644 root bin 10953 22535 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JavaScript.h 0644 root bin 1667 64216 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/JavaScriptCore.h 0644 root bin 1522 51587 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/OpaqueJSString.h 0644 root bin 2602 7253 1227533723 1 f none include/webkit-1.0/JavaScriptCore/API/WebKitAvailability.h 0644 root bin 27474 21986 1227533723 1 f none include/webkit-1.0/JavaScriptCore/APICast.h 0644 root bin 40 3422 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JSBase.h 0644 root bin 39 3345 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JSContextRef.h 0644 root bin 45 3992 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JSObjectRef.h 0644 root bin 44 3850 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JSRetainPtr.h 0644 root bin 44 3887 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JSStringRef.h 0644 root bin 44 3882 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JSStringRefCF.h 0644 root bin 46 4019 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JSValueRef.h 0644 root bin 43 3760 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JavaScript.h 0644 root bin 43 3824 1224797495 1 f none include/webkit-1.0/JavaScriptCore/JavaScriptCore.h 0644 root bin 47 4217 1224797495 1 f none include/webkit-1.0/JavaScriptCore/OpaqueJSString.h 0644 root bin 47 4216 1227533723 1 f none include/webkit-1.0/JavaScriptCore/WebKitAvailability.h 0644 root bin 51 4634 1227533723 1 d none include/webkit-1.0/webkit 0755 root bin 1 f none include/webkit-1.0/webkit/webkit.h 0644 root bin 1279 44777 1229583612 1 f none include/webkit-1.0/webkit/webkitdefines.h 0644 root bin 2188 58032 1229583612 1 f none include/webkit-1.0/webkit/webkitenumtypes.h 0644 root bin 545 46726 1229583612 1 f none include/webkit-1.0/webkit/webkitnetworkrequest.h 0644 root bin 2380 64373 1229583612 1 f none include/webkit-1.0/webkit/webkitprivate.h 0644 root bin 4699 64096 1229583612 1 f none include/webkit-1.0/webkit/webkitversion.h 0644 root bin 1586 63524 1229583612 1 f none include/webkit-1.0/webkit/webkitwebbackforwardlist.h 0644 root bin 4798 57476 1229583612 1 f none include/webkit-1.0/webkit/webkitwebframe.h 0644 root bin 3502 15943 1229583612 1 f none include/webkit-1.0/webkit/webkitwebhistoryitem.h 0644 root bin 3120 59919 1229583612 1 f none include/webkit-1.0/webkit/webkitwebinspector.h 0644 root bin 2401 1889 1229583612 1 f none include/webkit-1.0/webkit/webkitwebsettings.h 0644 root bin 2363 63053 1229583612 1 f none include/webkit-1.0/webkit/webkitwebview.h 0644 root bin 12644 10813 1229583612 1 d none lib 0755 root bin 1 d none lib/amd64 0755 root bin 1 d none lib/amd64/pkgconfig 0755 root other 1 f none lib/pkgconfig/webkit-1.0.pc 0644 root bin 245 21622 1229583612 1 d none lib/pkgconfig 0755 root other 1 f none lib/pkgconfig/webkit-1.0.pc 0644 root bin 239 21220 1229583612 1 i pkginfo 707 58678 1229583615 --Boundary_(ID_jyJlWls2TSN3JMhfdglDXw)-- From lists@mcintyreweb.com Thu Jan 15 01:14:29 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0F9ESU0008697 for ; Thu, 15 Jan 2009 01:14:28 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n0F9E1CV028788; Thu, 15 Jan 2009 02:14:25 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KDI008059NJPI00@nwk-avmta-2.sfbay.sun.com>; Thu, 15 Jan 2009 01:14:07 -0800 (PST) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KDI0002N9NIEM70@nwk-avmta-2.sfbay.sun.com>; Thu, 15 Jan 2009 01:14:07 -0800 (PST) Received: from relay43i.sun.com ([192.5.209.74]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n0F9E6xr022912; Thu, 15 Jan 2009 09:14:06 +0000 (GMT) Received: from mms49es.mms.us.syntegra.com ([160.41.221.232] [160.41.221.232]) by relay43i.sun.com with ESMTP id BT-MMP-1629749; Thu, 15 Jan 2009 09:14:06 +0000 (Z) Received: from relay43i.sun.com (relay43i.sun.com [192.5.209.74]) by mms49es.mms.us.syntegra.com with ESMTP id BT-MMP-717624; Thu, 15 Jan 2009 09:14:06 +0000 (Z) Received: from external.mcintyreweb.com ([64.166.3.75] [64.166.3.75]) by relay4i.sun.com with ESMTP id BT-MMP-23259309; Thu, 15 Jan 2009 09:14:05 +0000 (Z) Received: from twins.local (internal [64.166.3.74]) by external.mcintyreweb.com (8.13.7+Sun/8.13.7) with ESMTP id n0F9E4GH016990; Thu, 15 Jan 2009 01:14:04 -0800 (PST) Date: Thu, 15 Jan 2009 01:13:57 -0800 From: Hugh McIntyre Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008]: New timeout: 1/23 In-reply-to: <496EFAC0.5010301@sun.com> To: Irene Huang Cc: Edward Hunter , Alfred Peng , Shi-Ying Irene Huang , LSARC-ext@sun.com, Chris.Wang@sun.com Message-id: <496EFE55.0@mcintyreweb.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Brightmail-Tracker: AAAAAA== X-Antispam: No, score=-0.2/5.0, scanned in 0.059sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <495DC97D.70800@mcintyreweb.com> <4961B78C.6080808@sun.com> <4963932F.6040004@mcintyreweb.com> <49643070.70807@sun.com> <49669FF8.9080307@sun.com> <496E53F0.9000801@sun.com> <496EEA69.2050703@mcintyreweb.com> <496EFAC0.5010301@sun.com> User-Agent: Thunderbird 2.0.0.19 (Macintosh/20081209) Status: RO Content-Length: 1255 No objections from me at least - I think you're fine to close the case. Hugh. Irene Huang wrote: > Hi, Hugh > > Hugh McIntyre wrote: >> It's not clear from the public materials if you'll be shipping a man >> page or not. It's also not clear from the webkit.org sources whether >> these have man pages - it looks like the answer is no. > From the pkgmaps attached, the project does not ship manpage for now. >> >> In any case I think it's up to you want to do. If you ship >> documentation that says "HTTPS is not enabled by default" then it's up >> to you if you explain why or not. I thin you can either: >> >> - not mention WEBKIT_IGNORE_SSL_ERRORS at all. > >> - or if you do mention it, you should say that it's insecure and >> probably also should be considered obsolete (.ie. may go away in >> future?). > in the future if manpage is to be shipped for libwebkit, I'd prefer > option two. > Alfred and Chris, what's your opinion? > > Now that most of the questions seem to be answered, I don't see the > necessity of having a meeting (if I understand correctly). > If there's no objections, I would like to close this case within 24 hours. > > Thanks for all the comments :) > > --Irene >> >> Either option is OK with me. > > From Alfred.Peng@sun.com Thu Jan 15 07:32:49 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0FFWnMj001713 for ; Thu, 15 Jan 2009 07:32:49 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n0FFWkLe022242 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 15 Jan 2009 08:32:48 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KDI0081BR6NIY00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 15 Jan 2009 07:32:47 -0800 (PST) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KDI00577R6MPF40@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 15 Jan 2009 07:32:47 -0800 (PST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n0FFWjO0003605 for ; Thu, 15 Jan 2009 15:32:45 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0KDI00601R058D00@mail-apac.sun.com> (original mail from Alfred.Peng@Sun.COM) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 15 Jan 2009 23:32:45 +0800 (SGT) Received: from [192.168.1.71] ([116.15.185.152]) by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0KDI003I8R6K4PC5@mail-apac.sun.com>; Thu, 15 Jan 2009 23:32:45 +0800 (SGT) Date: Thu, 15 Jan 2009 23:32:45 +0800 From: Alfred Peng Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008]: New timeout: 1/23 In-reply-to: <496EFAC0.5010301@sun.com> Sender: Alfred.Peng@sun.com To: Irene Huang Cc: Hugh McIntyre , Edward Hunter , Shi-Ying Irene Huang , LSARC-ext@sun.com, Chris.Wang@sun.com Message-id: <496F571D.9000805@sun.com> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_Z1jHi4VQnPhh+ZxM28+uqQ)" X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <495DC97D.70800@mcintyreweb.com> <4961B78C.6080808@sun.com> <4963932F.6040004@mcintyreweb.com> <49643070.70807@sun.com> <49669FF8.9080307@sun.com> <496E53F0.9000801@sun.com> <496EEA69.2050703@mcintyreweb.com> <496EFAC0.5010301@sun.com> User-Agent: Thunderbird 2.0.0.18 (X11/20081203) Status: RO Content-Length: 3898 This is a multi-part message in MIME format. --Boundary_(ID_Z1jHi4VQnPhh+ZxM28+uqQ) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Hi Irene, Irene Huang wrote: > Hi, Hugh > > Hugh McIntyre wrote: >> It's not clear from the public materials if you'll be shipping a man >> page or not. It's also not clear from the webkit.org sources whether >> these have man pages - it looks like the answer is no. > From the pkgmaps attached, the project does not ship manpage for now. >> >> In any case I think it's up to you want to do. If you ship >> documentation that says "HTTPS is not enabled by default" then it's >> up to you if you explain why or not. I thin you can either: >> >> - not mention WEBKIT_IGNORE_SSL_ERRORS at all. > >> - or if you do mention it, you should say that it's insecure and >> probably also should be considered obsolete (.ie. may go away in >> future?). > in the future if manpage is to be shipped for libwebkit, I'd prefer > option two. > Alfred and Chris, what's your opinion? I'd go with option two. Attached is the drafted man page I prepared for libwebkit. I added the HTTPS part at the NOTE section. Thanks, -Alfred > Now that most of the questions seem to be answered, I don't see the > necessity of having a meeting (if I understand correctly). > If there's no objections, I would like to close this case within 24 > hours. > > Thanks for all the comments :) > > --Irene >> >> Either option is OK with me. > --Boundary_(ID_Z1jHi4VQnPhh+ZxM28+uqQ) Content-type: text/plain; name=libwebkit-1.0.txt Content-transfer-encoding: 7BIT Content-disposition: inline; filename=libwebkit-1.0.txt C Library Functions libwebkit-1.0(3) NAME libwebkit-1.0 - Web browser engine library DESCRIPTION WebKit is an open source web browser engine. It's also the name of the Mac OS X system framework version of the engine that's used by Safari, Dashboard, Mail, and many other OS X applications. WebKit's HTML and JavaScript code began as a branch of the KHTML and KJS libraries from KDE. WebKit is built on top of different widget backend, which includes GTK, Qt, wxWidgets and some others as well. In this case, WebKit/GTK+ is the engine for different GNOME applica- tions to depend on, devhelp/yelp for example. WebKit/GTK+ is a community sub-project maintained mostly by GNOME and GTK+ developers. It's implemented directly on top of GTK+, GLib and GNOME libraries and provides lightweight web viewing and editing features as well as being the basis for complete web browser applications. It supports the latest web standards and offers good performance and memory usage characteristics on the desktop. FILES The following files are used by this application: /usr/lib/libwebkit-1.0.so Web browser engine library ATTRIBUTES See attributes(5) for descriptions of the following attri- butes: ____________________________________________________________ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | |_____________________________|_____________________________| | Availability | SUNWwebkit SUNWwebkit-devel | |_____________________________|_____________________________| | Interface stability | Consolidate Private | |_____________________________|_____________________________| SEE ALSO attributes(5) NOTES The libwebkit-1.0 library doesn't enable HTTPS by default. Users can enable HTTPS manually by setting the environment variable "WEBKIT_IGNORE_SSL_ERRORS" to true. This option will skip the certificate verification and it's insecure. Written by Alfred Peng, Sun Microsystems Inc., 2009. --Boundary_(ID_Z1jHi4VQnPhh+ZxM28+uqQ)-- From Irene.Huang@sun.com Thu Jan 15 20:10:35 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0G4AZLF004495 for ; Thu, 15 Jan 2009 20:10:35 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n0G4AXCc025130 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 15 Jan 2009 21:10:35 -0700 (MST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KDJ0060RQ9MPR00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 15 Jan 2009 21:10:34 -0700 (MST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KDJ0058ZQ9K9C50@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 15 Jan 2009 21:10:34 -0700 (MST) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n0G4AW58005455 for ; Fri, 16 Jan 2009 04:10:32 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0KDJ00L01Q8PIK00@mail-apac.sun.com> (original mail from Irene.Huang@Sun.COM) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 16 Jan 2009 12:10:32 +0800 (SGT) Received: from [129.158.217.84] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0KDJ00GWFQ9IVYTA@mail-apac.sun.com>; Fri, 16 Jan 2009 12:10:31 +0800 (SGT) Date: Fri, 16 Jan 2009 12:10:26 +0800 From: Irene Huang Subject: Re: WebKit [LSARC/2008/782 FastTrack timeout 26/12/2008]: New timeout: 1/23 In-reply-to: <496F571D.9000805@sun.com> Sender: Irene.Huang@sun.com To: Alfred Peng Cc: Hugh McIntyre , Edward Hunter , Shi-Ying Irene Huang , LSARC-ext@sun.com, Chris.Wang@sun.com Message-id: <497008B2.1070301@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200812190627.mBJ6RCEI025771@sac.sfbay.sun.com> <495DC97D.70800@mcintyreweb.com> <4961B78C.6080808@sun.com> <4963932F.6040004@mcintyreweb.com> <49643070.70807@sun.com> <49669FF8.9080307@sun.com> <496E53F0.9000801@sun.com> <496EEA69.2050703@mcintyreweb.com> <496EFAC0.5010301@sun.com> <496F571D.9000805@sun.com> User-Agent: Thunderbird 2.0.0.19 (Windows/20081209) Status: RO Content-Length: 1466 Since there's no more comments, I am closing this case as approved :) --Irene Alfred Peng wrote: > Hi Irene, > > Irene Huang wrote: >> Hi, Hugh >> >> Hugh McIntyre wrote: >>> It's not clear from the public materials if you'll be shipping a man >>> page or not. It's also not clear from the webkit.org sources >>> whether these have man pages - it looks like the answer is no. >> From the pkgmaps attached, the project does not ship manpage for now. >>> >>> In any case I think it's up to you want to do. If you ship >>> documentation that says "HTTPS is not enabled by default" then it's >>> up to you if you explain why or not. I thin you can either: >>> >>> - not mention WEBKIT_IGNORE_SSL_ERRORS at all. >> >>> - or if you do mention it, you should say that it's insecure and >>> probably also should be considered obsolete (.ie. may go away in >>> future?). >> in the future if manpage is to be shipped for libwebkit, I'd prefer >> option two. >> Alfred and Chris, what's your opinion? > I'd go with option two. Attached is the drafted man page I prepared > for libwebkit. I added the HTTPS part at the NOTE section. > > Thanks, > -Alfred >> Now that most of the questions seem to be answered, I don't see the >> necessity of having a meeting (if I understand correctly). >> If there's no objections, I would like to close this case within 24 >> hours. >> >> Thanks for all the comments :) >> >> --Irene >>> >>> Either option is OK with me. >> >