Feeds

OMTP says mobile Web 2.0 is a beach

Now to get everyone to agree what that means

Providing a secure and efficient Helpdesk

Operator talking shop the Open Mobile Terminal Alliance has embarked on an ambitious plan to bring Web 2.0 to mobile phones, called Bondi to reflect the joy of surfing.

There is general agreement that AJAX-style applications would be a good thing on a mobile phone, both in terms of applications embedded in web pages and widgets embedded in the phone interface, but deciding what such applications should be allowed to do is more difficult.

Apple's iPhone ran into this problem when Steve announced that there would be no native applications, since AJAX could do anything an application could want. The problem is that mobile phone applications want to make phone calls, send text messages, check location information and integrate with other applications. But all of these things are prevented by the sandbox that protects users from malicious content.

So the iPhone will get native applications in addition to AJAX ones, but the OMTP reckons there can be a middle ground. Standard APIs will allow scripts access to phone functions, but not all scripts will be made equal.

Identifying which script should be allowed and which kept from accessing the phone is the tricky bit. Digitally signing scripts is possible, but requires secure certificate distribution and management - a process at which the mobile industry has proved remarkably inept.

Yesterday saw the first meeting of the Bondi working group, who will be deciding how much freedom is too much for untrusted applications, and how to identify those applications that deserve a little more trust. Apparently digital signitures will be on the agenda, but accompanied by the domain listing approach, where access to the APIs is restricted to scripts loaded from known sites.

Domain listing will appeal to the operators who make up the OMTP membership: though much less secure than digital signatures it's very simple to implement and gives complete control to the network operator.

The working group won't be publishing the first version of Bondi until the Autumn, although more details should emerge in the next month or two, and in proper OMTP style it already has a logo. ®

Security for virtualized datacentres

More from The Register

next story
TEEN RAMPAGE: Kids in iPhone 6 'Will it bend' YouTube 'prank'
iPhones bent in Norwich? As if the place wasn't weird enough
Consumers agree to give up first-born child for free Wi-Fi – survey
This Herod network's ace – but crap reception in bullrushes
Crouching tiger, FAST ASLEEP dragon: Smugglers can't shift iPhone 6s
China's grey market reports 'sluggish' sales of Apple mobe
Sea-Me-We 5 construction starts
New sub cable to go live 2016
New EU digi-commish struggles with concepts of net neutrality
Oettinger all about the infrastructure – but not big on substance
PEAK IPV4? Global IPv6 traffic is growing, DDoS dying, says Akamai
First time the cache network has seen drop in use of 32-bit-wide IP addresses
EE coughs to BROKEN data usage metrics BLUNDER that short-changes customers
Carrier apologises for 'inflated' measurements cockup
Comcast: Help, help, FCC. Netflix and pals are EXTORTIONISTS
The others guys are being mean so therefore ... monopoly all good, yeah?
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.