Feeds

OMTP says mobile Web 2.0 is a beach

Now to get everyone to agree what that means

Intelligent flash storage arrays

Operator talking shop the Open Mobile Terminal Alliance has embarked on an ambitious plan to bring Web 2.0 to mobile phones, called Bondi to reflect the joy of surfing.

There is general agreement that AJAX-style applications would be a good thing on a mobile phone, both in terms of applications embedded in web pages and widgets embedded in the phone interface, but deciding what such applications should be allowed to do is more difficult.

Apple's iPhone ran into this problem when Steve announced that there would be no native applications, since AJAX could do anything an application could want. The problem is that mobile phone applications want to make phone calls, send text messages, check location information and integrate with other applications. But all of these things are prevented by the sandbox that protects users from malicious content.

So the iPhone will get native applications in addition to AJAX ones, but the OMTP reckons there can be a middle ground. Standard APIs will allow scripts access to phone functions, but not all scripts will be made equal.

Identifying which script should be allowed and which kept from accessing the phone is the tricky bit. Digitally signing scripts is possible, but requires secure certificate distribution and management - a process at which the mobile industry has proved remarkably inept.

Yesterday saw the first meeting of the Bondi working group, who will be deciding how much freedom is too much for untrusted applications, and how to identify those applications that deserve a little more trust. Apparently digital signitures will be on the agenda, but accompanied by the domain listing approach, where access to the APIs is restricted to scripts loaded from known sites.

Domain listing will appeal to the operators who make up the OMTP membership: though much less secure than digital signatures it's very simple to implement and gives complete control to the network operator.

The working group won't be publishing the first version of Bondi until the Autumn, although more details should emerge in the next month or two, and in proper OMTP style it already has a logo. ®

Security for virtualized datacentres

More from The Register

next story
TEEN RAMPAGE: Kids in iPhone 6 'Will it bend' YouTube 'prank'
iPhones bent in Norwich? As if the place wasn't weird enough
Consumers agree to give up first-born child for free Wi-Fi – survey
This Herod network's ace – but crap reception in bullrushes
Crouching tiger, FAST ASLEEP dragon: Smugglers can't shift iPhone 6s
China's grey market reports 'sluggish' sales of Apple mobe
Sea-Me-We 5 construction starts
New sub cable to go live 2016
New EU digi-commish struggles with concepts of net neutrality
Oettinger all about the infrastructure – but not big on substance
EE coughs to BROKEN data usage metrics BLUNDER that short-changes customers
Carrier apologises for 'inflated' measurements cockup
Comcast: Help, help, FCC. Netflix and pals are EXTORTIONISTS
The others guys are being mean so therefore ... monopoly all good, yeah?
Surprise: if you work from home you need the Internet
Buffer-rage sends Aussies out to experience road rage
prev story

Whitepapers

A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.