[cap-talk] Fwd: [cors] TAG request concerning CORS &Next Step(s)

[David-Sarah Hopwood]

stay wrote:
> On Mon, Jul 6, 2009 at 2:53 PM, Karp, Alan H<alan.karp at hp.com> wrote:
>> To your first point above, can the software making the request be a script
>> on a page or a browser plug-in?  If so, what prevents Bob's Finance from
>> delivering to the user's browser software that will make requests as Acme Finance?
> 
> The fact that almost no one installs plugins.

That's not true. They install Flash, and Flash ActionScript code can make
such requests.

-- 
David-Sarah Hopwood  ⚥  http://davidsarah.livejournal.com