Thomas Leonard <talex5@...> wrote:
> Typically, a local interface only lists a single implementation, whereas a
> 0alias script will run any available version.
That's true at this point, yeah. I'm kindof seeking to change that.
> You can distribute the scripts created by 0alias now and they'll work in
> any desktop.
> The problem is that if you distribute them then you'll probably want to
> sign them too, or at least check that they really are 0alias scripts and
> not something malicious when the user runs them,
Some of the major Good Things about 0install are the automatic
signature checking, and the potential for trivial, even automatic,
sandboxing. This can be hard to do when we encourage users to download
and run shell scripts directly. The signature checking is maybe
solvable in a general way (run action should check signature, then
forward the decrypted file to appropriate app), but this won't work
for drag-and-dropped things. The sandboxing is harder: there is no way
to automatically tell the difference between a (signed) 0alias script
and some random other (signed) shell script - and these would need
If the user instead clicks the /interface/, the MIME detection can
differentiate it easily from a shell script, do the right sandboxing,
and 0launch already handles the interface signatures by itself. The
only problem with this at the moment, is that it never offers new
versions after that point.
Shipping just the interface also allows one URL to be given to
everyone who uses the injector, and not inconvenience any of them:
I'm thinking CLI users here, who would probably prefer to send a URI
straight to 0launch than downloading a script to do it for them (a
copy+paste one-liner, rather than downloading, chmodding, gpging, and
running a shell script).
Then, there's the matter of icons: it would be relatively easy to set
up thumbnailers for injector interfaces across a reasonable subset of
the file managers, no? Certainly easier than for a 0alias script.
Lennon Victor Cook
"He who receives an idea from me receives without lessening, as he who
lights his candle at mine receives light without darkening" - Thomas