Re: [TulsaWebDevs] Web Database (Was Re: HTML 5 Database Storage)

[Rod Knowlton]

Seems SQL database storage isn't gone, it's just been spun-off from HTML5 for political reasons.

It's now called Web Database, and the spec is at W3C.

On Tue, Aug 11, 2009 at 06:29, Rod Knowlton <rod.kn...@gmail.com> wrote:

Are you saying providing a local data store so web apps can work offline is a bad idea?

Because key/value is only the way to go for key/value data. Gmail's new iPhone/Android interface couldn't possibly work without a relational database.

And yes, they really would all use sqlite3. They'd be insane not to. It's fast, small, public domain, supports transactions, has no external dependencies beyond C library functions and is already available for Win, OS X, and Linux. All the browsers need to build to spec is the bridge from JavaScript to sqlite3.

On Tue, Aug 11, 2009 at 00:14, John Hornbeck <horn...@gmail.com> wrote:

sql in html5 was just a bad idea. Each browser having to build to spec their own sql engines? I know some talked about sqlite but would they all really do that? Meh, key/value is the way to go

On Tue, Aug 11, 2009 at 12:09 AM, Rod Knowlton <rod.kn...@gmail.com> wrote:

It's late, and the print's pretty small on my iPhone, but that
whitepaper doesn't seem to say anything beyond "things that were
already insecure have further security implications with regard to
HTML 5 client side storage".

Was there any issue described that didn't require a vulnerability
that's not actually part of HTML5 Storage such as XSS, SQL injection,
or a compromised host?


On Aug 10, 2009, at 22:57, Joseph A Holsten <jos...@josephholsten.com>
wrote:

>
> Status: 410 Gone.
>
> The SQL Database storage that used to be in HTML 5 has been removed,
> both from the HTML 5 spec and from the Web Storage spec that had been
> defining it. It is still present in the current Working Draftof the
> Web Storage spec from April 23rd:
>   http://www.w3.org/TR/webstorage/#sql
>   http://www.w3.org/TR/2009/WD-webstorage-20090423/#sql
> But as you can see for yourself, it's gone in the current Editor's
> Draft:
>   http://dev.w3.org/html5/webstorage/#sql
>
> Which is not to say ol Hixie hasn't been known to change his mind
> before. But until the vulnerabilities in this are well considered, I
> wouldn't count on SQL coming back:
>   http://trivero.secdiscover.com/html5whitepaper.pdf
>
>
> Also, I forgot to mention the related issue of offline mode for HTML 5
> docs. Seems like you'll get almost everything you could want with a
> cache manifest:
>   http://www.whatwg.org/specs/web-apps/current-work/multipage/offline.html
>
> Joseph Holsten
>
> >

--

John Hornbeck
Support Manager
Engine Yard
http://engineyard.com

“Work hard to find something that fascinates you.” - Richard Feynman