From jferrai at us.ibm.com Tue Jul 28 08:20:50 2009 From: jferrai at us.ibm.com (Jon Ferraiolo) Date: Tue, 28 Jul 2009 08:20:50 -0700 Subject: [OpenAjax] OpenAjax Hub 2.0 approved, final review phase for OpenAjax Metadata, and other news Message-ID: This email contains news and announcements from OpenAjax Alliance: (1) OpenAjax Hub 2.0 is now an Approved Specification (2) OpenAjax Metadata 1.0 - Final Review Phase (3) Accessible RIA Initiative (4) Security Task Force on Mashup Authentication and Authorization See below for details. (1) OpenAjax Hub 2.0 is now an Approved Specification -------------------------- The Interoperability Working Group, the members of OpenAjax Alliance, and the Steering Committee have all approved OpenAjax Hub 2.0, which is now an Approved Specification of OpenAjax Alliance. Congratulations to everyone involved in that effort. The big new feature in Hub 2.0 (versus Hub 1.0) is its Managed Hub feature which isolates third party widgets (potentially malicious) into secure sandboxes and mediates messaging among the widgets with a security manager. The security techniques in Hub 2.0 address the primary security concerns among IT managers that have until now inhibited adoption of mashup software. Hub 2.0 technology includes a fast-performance inline option for trusted widgets (e.g., widgets developed by the company?s own IT department). The root page for the approved specification is at: * http://www.openajax.org/member/wiki/OpenAjax_Hub_2.0_Specification The open source implementation of the spec, along with the comprehensive test suite, can be found at the OpenAjax Alliance project at SourceForge: * http://sourceforge.net/projects/openajaxallianc Additional background information on Hub 2.0 can be found at: * http://www.openajax.org/member/wiki/OpenAjax_Hub_2.0_Approval_Voting_Page We have two white papers about Hub 2.0 that are under development: * http://www.openajax.org/member/wiki/Introducing_OpenAjax_Hub_and_Secure_Mashups * http://www.openajax.org/member/wiki/OpenAjax_Hub_2.0_and_Mashup_Assembly_Applications (2) OpenAjax Metadata 1.0 - Final Review Phase -------------------------- OpenAjax Metadata defines Ajax industry standards for an XML format that describes the JavaScript APIs and widgets found within Ajax toolkits. The primary objective with OpenAjax Metadata is to drive interoperability between Ajax developer tools and Ajax libraries so that any Ajax tool can work with any Ajax/JavaScript library and any Ajax widget. This initiative targets both IDEs and mashup assembly tools. After a long standards effort, OpenAjax Metadata 1.0 is now in its final stages. The specification is complete and the IDE Working Group has begun its final review phase, where the WG systematically reviews the full text of the specification to make sure the content is correct and well-written. The final review phase is likely to last another 1-2 months. If no major problems are found, then the metadata spec will be submitted for approval as an OpenAjax standard (just as what happened recently with Hub 2.0).. The root page for the OpenAjax Metadata 1.0 Specification is at: * http://www.openajax.org/member/wiki/OpenAjax_Metadata_1.0_Specification Although the metadata spec is not yet approved, leading commercial products already ship support for the specification or have demonstrated support for the specification, including Adobe Dreamweaver, Aptana Studio, Eclipse JSDT, RadWebTech, IBM Rational Application Developer and SAP. Adobe Exchange includes many Web Widgets that use the OpenAjax Widget format (defined with OpenAjax Metadata), including widgets built from the following Ajax libraries: jQuery, MooTools, Spry and YUI. IBM Rational Application Developer supports Dojo widgets defined in the OpenAjax Widget format. The alliance provides open source code (at the OpenAjax Alliance project at SourceForge) that implement various parts of the metadata specification . The open source includes an OpenAjax Widget loader (for widget metadata) and a JSDoc to OpenAjax Metadata converter (for API metadata): * http://sourceforge.net/projects/openajaxallianc (3) Accessible RIA Initiative -------------------------- The Accessibility Tools Task Force, whose mission is to promote better Ajax tooling for the creation of accessible Rich Internet Applications (RIAs), has made great progress in the past six months. See: * http://www.openajax.org/member/wiki/Accessibility (4) Security Task Force on Mashup Authentication and Authorization -------------------------- In early 2009, the Security Task Force at OpenAjax Alliance launched a new initiative around Mashup Authentication and Authorization, with an emphasis on single sign-on workflows. The goal of this initiative is to perform a deep study of real-life use cases of technologies in use today, such as login/password dialogs, OpenID, SAML, and OAuth, and then develop a set of incremental technical standards (if necessary), best practices, and educational sample applications. (http://www.openajax.org/blog/?p=71) In the spring, the initiative produced some widget samples that illustrate suggested techniques for using OpenAjax Hub 2.0 in conjunction with OpenID. The initiative will resume in late summer, with further development of sample code that illustrates best practices. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://openajax.org/pipermail/public/attachments/20090728/92ef4688/attachment.html From jferrai at us.ibm.com Wed Sep 2 18:49:30 2009 From: jferrai at us.ibm.com (Jon Ferraiolo) Date: Wed, 2 Sep 2009 18:49:30 -0700 Subject: [OpenAjax] OpenAjax/OpenSocial, Browser Wishlist v2, Hub 2.0 press release, and more Message-ID: Recent news from OpenAjax Alliance: (1) OpenAjax Hub 2.0 press activity (2) Two new white papers on Hub 2.0 (3) Browser Wishlist, 2009 Edition (4) Final review phase for OpenAjax Metadata (5) Upcoming conferences: Ajax Experience and SVG Open ---------------------------- (1) OpenAjax Hub 2.0 press activity OpenAjax Alliance sent out a press release on the finalization and approval of OpenAjax Hub 2.0 on August 31. Multiple trade magazines picked up the story. Here is the press release: * http://news.prnewswire.com/ViewContent.aspx?ACCT=109&STORY=/www/story/08-31-2009/0005085209&EDATE= Several publications reprinted our press release (e.g., Reuters): * http://www.reuters.com/article/pressRelease/idUS116147+31-Aug-2009 +PRN20090831 The following are magazines that researched the announcement and wrote original articles about it: * Infoworld: http://infoworld.com/d/developer-world/ajax-widget-security-enabled-633 * eWeek: http://www.eweek.com/c/a/Application-Development/OpenAjax-Alliance-Delivers-Secure-Mashup-Software-436331/ * SDTimes: http://www.sdtimes.com/OPENAJAX_HUB_BETTER_SECURES_MASHUPS/By_Jeff_Feinman/About_JAVA_and_OPENAJAX/33723 * Heise Online: http://www.heise.de/ix/Ajax-Widgets-sicher-in-Websites-einbinden--/news/meldung/144530 The major addition to Hub 2.0 is a JavaScript Library for Secure Enterprise Mashups created to better protect widgets and mashups from hackers and malicious intent. It addresses concerns among IT managers that may have inhibited adoption of mashup software within companies. Hub 2.0 isolates third-party widgets into secure sandboxes and mediates messaging among the widgets with a security manager. For example, suppose a Web site includes a third-party calendar widget. That widget itself might be malicious or might become malicious if its code has vulnerabilities that allow a site to hijack the widget. Malicious widgets could transmit hijacked data to a scamming web site or piggyback user credentials to read and write from company servers. ---------------------------- (2) Two new OpenAjax white papers about Hub 2.0 The alliance has posted two new white papers that introduce and provide technical background on OpenAjax Hub 2.0: "Introducing OpenAjax Hub 2.0 and Secure Mashups" --- http://www.openajax.org/whitepapers/Introducing%20OpenAjax%20Hub%202.0%20and%20Secure%20Mashups.php "OpenAjax Hub 2.0 and Mashup Assembly Applications" --- http://www.openajax.org/whitepapers/OpenAjax%20Hub%202.0%20and%20Mashup%20Assembly%20Applications.php ---------------------------- (3) Browser Wishlist, 2009 Edition The 2009 Edition of the OpenAjax Browser Wishlist is now in its early phases. Stephen Walther of Microsoft is chairing the effort. He sent announcements to the OpenAjax runtime at openajax mailing list and the Open Web mailing list at Google Groups: * http://openajax.org/pipermail/runtime/2009-August/000063.html * http://groups.google.com/group/openweb-group/browse_thread/thread/f670eeb9ab161e69 There is a long email thread with great feedback relative to the 2nd link above. Our current plans are to conduct the wishlist following a similar process to how things went last year (the 2008 browser wishlist), but likely changes for this year: * More compressed cycle for feedback and voting (e.g., compress the review and voting period to about 1 month instead of 3 months), * Wishlist content is likely to have a much different focus due to rapid changes in the industry (e.g., HTML5 momentum, rise of mobile devices, use of Ajax technologies outside of the browser) The best way to be kept informed about progress on this initiative is to subscribe to the runtime at openajax.org email list ( http://openajax.org/mailman/listinfo/runtime). ---------------------------- (4) Final Review Phase for OpenAjax Metadata The IDE Working Group has completed the draft specification for OpenAjax Metadata 1.0: * http://www.openajax.org/member/wiki/OpenAjax_Metadata_1.0_Specification and is now doing a detailed editorial review of the content in preparation for submitting the specification for finalization and approval. The Working Group is approximately halfway through the detailed editorial review and is likely to complete the review process in the month of October 2009. OpenAjax Metadata define the following: * Ajax APIs - The runtime JavaScript APIs (e.g., classes and methods) that are available for an Ajax library. * Ajax widget OpenAjax Metadata can describe two types of widgets: --- UI controls - The user interface components -- such as combo boxes, menu bars, charts, and calendars -- that some Ajax libraries provide. --- Mashup components - Pre-packaged mini-applications (sometimes called "widgets" or "gadgets") that can be combined together within a composite application (the "mashup"), where the mashup components react to each other intelligently, such as when the user selects an address in one component, and a different component displays an updated map for that address. The primary target consumers of OpenAjax Metadata 1.0 are software products, particularly Web page developer tools targeting Ajax developers. It is expected that these software products will consume and use the metadata to provide an enhanced experience for users building Ajax-powered solutions. In particular: * Ajax IDEs -will likely use OpenAjax Metadata to provide developers with API documentation, intelligent code-assist, widget palettes, and widget property editors. * Mashup assembly applications- will use OpenAjax Widget Metadata for definitions of widget user interface, widget APIs, identification of pub/sub messages to which the widget publishes or subscribes, and identification of shared properties. ---------------------------- (5) Upcoming conferences: Ajax Experience and SVG Open OpenAjax Alliance is a media sponsor for Ajax Experience and a sponsor of SVG Open. OpenAjax members will be given a $100 discount for Ajax Experience. Details about this offer can be found at: * http://openajax.org/pipermail/participants/2009q3/000379.html SVG Open is particularly important this year because of recently improved native support for SVG in Chrome, Firefox, Safari and Opera, and the SVG Web project that brings standards-compliant SVG to IE. For more on SVG, see: * http://www.openajax.org/blog/?p=78 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://openajax.org/pipermail/public/attachments/20090902/c79a7482/attachment.html From ricjohnsoniii at gmail.com Mon Sep 7 18:28:55 2009 From: ricjohnsoniii at gmail.com (Ric Johnson) Date: Mon, 7 Sep 2009 21:28:55 -0400 Subject: [OpenAjax] openajax.com website down Message-ID: Just wanted to say that the openajax.com website is down. We will try to get it back up ASAP. Please note: We consider this a CRIMINAL ACT by the hosting company since it was done intentionally without notice and no chance to backup any files. If anyone knows a good lawyer in CA, I would appreciate a referral. This is NOT the OpenAjax Alliance website - this is about OpenAjax DOT COM - a private website about openAjax Ric