| Date | Subject | Slides | Required Reading | Additional Resources | Assignments |
|---|---|---|---|---|---|
|
|
Mobile Application Design and Developmentcourse. We will discuss the course topics and the syllabus, the assignments and what we expect in terms of prerequisites and how assignments will be supported, and some administrative issues.
Configureaccess to Web-based browser emulator (Opera mini)
mashupbetween data sources
mobileOKis a test suite for testing for compatibility with basic browsers
one size does not fit all
http://dret.net/lectures/mobapp-spring10/mobapp-spring10@bspace.berkeley.edua(all slides), and then
s(smaller font) a couple of times
mobile devices
Mobileis better defined by settings than by devices
Mobile settingscan be defined by various properties
Mobiledoes not specify what the mobile part is
mobilecomponent
Mobile Producersrequire the service to provide location-based information
Mobile Consumersare accessing services/data from mobile settings
|
View Larger Map |
|
lock-inoften has short-time savings and long-term costs
Technology useas entertainment
servicein immediate scan/print to a phone endpoint
texting) started in GSM countries
reappropriation stories
email for phone users(asynchronous messaging)
History of Mobile Applicationsnot only is a good exercise in better understanding different approaches, but it is also interesting to look at why certain approaches may have failed or succeeded. Often, the deciding factors are not just technical, but economical and social issues play an important role as well.
advanced dial-up
Smartphoneseems to be the new term for
PDA
leave the garden
WAPbrand name
trusted WAP gateway)
Traditional HTMLis static content
browser warsmade scripting very cumbersome
hopin the communications chain. Based on this connectivity, we look at what it takes to establish a Web connection, how clients and servers are connected (how the data is actually routed), and how this can be influenced by intermediaries. Finally, we look in more detail at the endpoints of such a conversation, the browser and the server. How does a browser on a mobile device access the network, and how does a server receiving a request route it to the appropriate logic for processing it? We will discuss many of these in more detail later, but this lecture presents the big picture of how they all work together to make the mobile Web work.
Joining the Internetmeans to connect to a connected gateway
interceptingtraffic on various levels
real application
GET requests ask to get a certain resource's representationkindsof server-side resources
users
localhost always refers to the host's own interfacefile URI) can have unexpected side-effects
file:///c:/Documents%20and%20Settings/dret/Desktop/drectures/mobapp-spring10http://localhost/drectures/mobapp-spring10ftp://tik50x.ethz.ch/home/dret/public_html/lectures/mobapp-spring10http://dret.net/lectures/mobapp-spring10just work
just work, URIs must be used responsibly
people and people~/public_htmlmobapp configuration writes to log files in ~/mobapp-logshttp://dret.net/netdret points to aquadret.jpg
██ Internet Explorer (59.21%)
██ Mozilla Firefox (28.29%)
██ Chrome (5.02%)
██ Safari (4.54%)
██ Opera (1.68%)
██ Other (1.26%)
fixing them
extensionsto the basic DOM model
locally(changes in the browser)
XMLHttpRequest API has been built for requesting XML via HTTPXMLHttpRequest has to be parsed into a DOM treeAT&Tas
AT&T)
<address><city>Berkeley</city><zip>94720</zip>…)<givenname>Erik</givenname><givenname>Thomas</givenname>)content
<opens a tag
&name; for referring to the entity name<, >, &, ', "<elem attr="Single ' and Double ""/>Attribute using both kinds of quotes: <elem attr="Single ' and Double ""/>]]>
toa resource
manuallyin a URI
hackableURIs are convenient for developers
http://api.flickr…1313291@N20&lang=en-us&format=rss_200The Myth of RSS Compatibilityprovides a good overview
why standards are a good thing
incompatible by design(RDF vs. non-RDF)
new RSS
xml:lang and xml:basesmartabout what the RSS author really wanted
text)text, no child elements are allowed (plain text content)html then RSS's method of escaped markup is usedxhtml then there must be an text/ then no child elements are allowedOne bold foot forward]]>
The "atom:content" element either contains or links to the content of the entry. The content of atom:content is Language-Sensitive.]]>
The <code>atom:content</code> element either contains or links to the content of the entry. The content of <code>atom:content</code> is <a href="http://www.ietf.org/rfc/rfc3066.txt">Language-Sensitive</a>.]]>
iVBORw0KGgoA … TAAAAAElFTkSuQmCC ]]>
]]>
XMLHttpRequest gets into the way<link rel="alternate" type="application/rdf+xml" title="…" href="…" /> <link rel="alternate" type="application/rss+xml" title="…" href="…" />
<link rel="alternate" type="application/atom+xml" title="…" href="…" />
CUDout of the
CRUDset of operations
| Resource | HTTP Method | Representation | Description |
|---|---|---|---|
| Introspection |
|
Atom Service Document | Enumerates a set of collections and lists their URIs and other information about the collections |
| Collection |
|
Atom Feed | A list of member of the collection (this may be a subset of all entries in the collection) |
| Collection |
|
Atom Entry | Create a new entry in the collection |
| Member |
|
Atom Entry | Get the Atom Entry |
| Member |
|
Atom Entry | Update the Atom Entry |
| Member |
|
n/a | Delete the Atom Entry from the collection |
Service Documents represent server-defined groups of Collections, and are used to initialize the process of creating and editing resources.
realtop-level construct of AtomPub is the workspace
entry as special value)fixed)URI = scheme ":" hier-part [ "?" query ] [ "#" fragment ]
http://dret.net/lectures/web-fall09/foundations#uri-schemes
inputto the resource
The two basic protocols which every Web browser must implement are DNS access and HTTP. However, most operating systems provide an API for DNS access, so the browser can use this service locally and only has to implement HTTP. TCP (which is required as the foundation for HTTP) is usually provided by the operating system.
provided by CacheLogic Inc.
http://rosetta.ischool.berkeley.edu:8085/)start-line message-header * message-body ?
Date as the message origination dateAccept-Language indicates language preferencesServer contains system informationContent-Type specifies the media type of the entityX-header typethey convey different information
fits best
Accept uses a list of media typesAccept-Charset uses a list of character setsAccept-Encoding uses a list of content encodingsAccept-Language uses a list of language codesUser-Agent specifies the client's identificationGET, HEAD, POSTPUT, DELETEHost header field must be included in every requestMethod Request-URI HTTP/Major.Minor [Header]* [Entity]?
If-*: only reply with the entity if necessaryRange: only reply with the requested part of the entityGET / HTTP/1.1 Host: ischool.berkeley.edu
2** for variations of ok
3** for redirections4** are different client side problems (404: not found)5** are different server side problemsHTTP/Major.Minor Status-Code Text [Header]* [Entity]?
401 Unauthorized means the resource is access controlled403 Forbidden means the resource is inaccessible405 Method Not Allowed signals a request using the wrong request method
username:passwordHTTP/1.0 401 Unauthorized WWW-Authenticate: Basic realm="SokEvo"
GET /private/index.html HTTP/1.0 Authorization: Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==
state
logging outof HTTP authenticated sessions is hard
log outwithout using browser-specific controls
secure personal browsersthis would not work very well
XMLHttpRequest Specclick to scrollmap services), or it can be used to implement behavior that would be impossible without scripting (for example the online applications of Google Docs). Asynchronous JavaScript and XML (Ajax) takes Dynamic HTML (DHTML) to the next level by allowing server access from within scripting code. This is accomplished by using a standardized API for client/server communications, the
XMLHttpRequest object. This objects allows using HTTP connections from within scripting code, and thereby allows scripting code to dynamically reload data from a server in response to user interactions.
mouseOver events)versionsof DOM/JavaScript
missing functionality
XMLHttpRequestXMLHttpRequest handles all HTTP interaction mechanicsXMLHttpRequest essentially is a client-side HTTP APIXMLHttpRequest allows all HTTP methods to be usedXMLHttpRequest can be used for any content typeresponseText always contains the entity body of the HTTP responseXMLHttpRequest treats XML-oriented responses in a special waytext/xml, application/xml or …+xml responses are XML media typesresponseXML contains XML parsed into a DOM treeXMLHttpRequest allows all header fields to be inspectedgetResponseHeader() returns a specific response headergetAllResponseHeaders() returns all response headers// The following script:
var client = new XMLHttpRequest();
client.open("GET", "test.txt", true);
client.send();
client.onreadystatechange = function() {
if(this.readyState == 2) {
print(client.getResponseHeader("Content-Type"));
}
}
// ...should output something similar to the following text:
Content-Type: text/plain; charset=utf-8
best match
addressesto be used in request
// The following script:
var client = new XMLHttpRequest();
client.open('GET', 'ajax-data');
client.setRequestHeader('Accept', 'application/json;q=1.0, application/xml;q=0.8');
client.send();
// ... results in the following header being sent:
...
Accept: application/json;q=1.0, application/xml;q=0.8
...
best JavaScript framework
is there a collapse/expand folder view?)
is the framework openly licensed)
well-behaving3rd-parties can be essential
datafrom 3rd parties can be risky
dataformats have the capability to embed code
reverse proxy
XMLHttpRequest in its original design implements the same-origin policyXMLHttpRequest implements the same-origin policyXMLHttpRequest2 is less limited but not yet widely deployedXMLHttpRequest implements the idea of script-based data access{ "JSON" : "Hello World!"}
jsonp({ "JSON" : "Hello World!"})
padding
http://api.flickr.com/…&format=json&jsoncallback=flickrfeed
JSONP function call
XMLHttpRequest requests are subject to the same-origin policyforwardthe request to the 3rd-party URI
LoadModule proxy_module modules/mod_proxy.so LoadModule proxy_http_module modules/mod_proxy_http.so LoadModule rewrite_module modules/mod_rewrite.so
incomingURIs to
outgoingrequests
RewriteEngine On ProxyRequests Off <Proxy *> Order deny,allow Allow from all </Proxy> RewriteRule ^/staticmap(.*) http://maps.google.com/maps/api/staticmap$1 [P]
Designing the Mobile User Experience.
|
Firefox Safari Opera Netscape Mozilla Chrome Other |
the standard mobile platformis more challenging than for computers
fat clients
fat clientsa while ago
thin clientsare more cost-effective (less local maintenance)
cloudadds flexibility
Application Storesremove some of the native application problems
eBay for applications)
Application Storesintroduce typical monopoly problems
Touch Webis a new term for explicitly
touch-friendlyWeb pages
classes
tr:nth-child(2n+1) /* represents every odd row of an HTML table */ tr:nth-child(odd) /* same */ tr:nth-child(2n+0) /* represents every even row of an HTML table */ tr:nth-child(even) /* same */
Web 2.0 technologies
data URIs for additional functionalitybuckets)
XMLHttpRequestthreadsfor scripting)
other platformssuch as tablets, e-books, cars, consoles, …
least common denominatoris really low
classesto identify?
regular siteassuming a laptop/desktop computer and environment
mobile siteeither very basic (WAP) or touch-specific (iPhone)
@media all and (orientation:portrait) { … }
@media all and (orientation:landscape) { … }
<link rel="stylesheet" media="print and (color)" href="http://…" /> <link rel="stylesheet" media="print and (monochrome)" href="http://…" />
One Web URIs
switchbetween different representations
http://berkeley.mobi/http://m.berkeley.edu/http://berkeley.edu/mobile.mobi has not seen much adoption
J2MEcould be shipped
Write Once, Run Anywherevision
| Platform | Language | Sophistication |
|---|---|---|
| iPhone | Objective C | complicated & polished |
| Android | Java | Eclipse |
| Blackberry | Java | not great |
| Windows Mobile | .NET and/or C# | complex |
| Nokia (Maemo/MeeGo) | C++, Java, Flash Light, Web techs | not focused |
| Palm (WebOS) | Web techs | ? |
windowing metaphor)
windowing metaphor)
chrome)
Aural CSSmight still happen)
Write Once, Run Anywhere
standalone Flash
backbutton
black holes
black holeeffect is easier in a browser
best solutionfor mobile applications
|
IP address from local Wi-Fi: |
IP address through AT&T 3G: |
Class Anetworks are assigned to a few big entities
only4 billion addresses
hidesdevice IP addresses to the outside world
seevarious towers
Accuracyinformation given by receivers often is wrong
norm
interface Position {
readonly attribute Coordinates coords;
readonly attribute DOMTimeStamp timestamp;
};
interface Coordinates {
readonly attribute double latitude;
readonly attribute double longitude;
readonly attribute double altitude;
readonly attribute double accuracy;
readonly attribute double altitudeAccuracy;
readonly attribute double heading;
readonly attribute double speed;
};
civic locationswill be supported in the next version
Berkeley, CA→ (37.875733,-122.265092)
Berkeley, CA
User Agents must not send location information to Web sites without the express permission of the user.
User Agents must acquire permission through a user interface, unless they have prearranged trust relationships with users.
The user interface must include the URI of the document origin.
[…] permissions […] must be revocable and User Agents must respect revoked permissions.
Recipients must only request location information when necessary.
Recipients must only use the location information for the task for which it was provided to them.
Recipients must dispose of location information once that task is completed, unless expressly permitted to retain it by the user.
Recipients must also take measures to protect this information against unauthorized access.
If location information is stored, users should be allowed to update and delete this information.
opt-out, an
opt-inmodel would have been possible
third partyoften is defined in a very fuzzy way
falselocations
best scopefor client-side state?
Typical Web resources (HTML pages) are assembled from a number of resources retrieved by HTTP. Any resource not originating on the server that is hosting the HTML page is considered a third-party resource
. If the HTTP response for such a resource contains a cookie, it is a third-party cookie
.
<script type="text/javascript">
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
</script>
<script type="text/javascript">
try {
var pageTracker = _gat._getTracker("UA-xxxxxx-x");
pageTracker._trackPageview();
} catch(err) {}
</script>
between tabs
cookie storage spaceautomatically
sessionsas well as (some) access control
interface Storage {
readonly attribute unsigned long length;
getter DOMString key(in unsigned long index);
getter any getItem(in DOMString key);
setter creator void setItem(in DOMString key, in any data);
deleter void removeItem(in DOMString key);
void clear();
};
Local applicationsoften have sophisticated storage needs
User agents must implement the SQL dialect supported by SQLite 3.6.19
bettersolution for storage
local applicationand
Web UIcan be challenging
syncing
local-only
Client/Server Computingcombined PCs and central servers
Thin Clientswere providing display services only (X11)
Web Clientswere a better implementation of the
thin clientidea
Rich Internet Applicationsmove more functionality to the client
fat clientdevelopment
script
scriptis handed to the server
http://radblast-aa.wunderground.com/cgi-bin/radar/WUNIDS_map?station=MUX&brand=wui&num=6&delay=15&type=N0R&frame=0&scale=0.498&noclutter=0&t=1165711666&lat=37.86912155&lon=-122.26962280&label=Berkeley%2C+CA&showstorms=0&map.x=400&map.y=240¢erx=470¢ery=334&transx=70&transy=94&showlabels=1&severe=0&rainsnow=1&lightning=0script
designof the language is more pragmatic than elegant
The term Mixed content in XML refers to elements which have text content mixed with elements. What these elements do depends on the elements 
, but the important point is that they are on the same level as the text nodes of the mixed content.
There are two ways of constructing a software design: One way is to make it so simple that there are obviously no deficiencies, and the other way is to make it so complicated that there are no obvious deficiencies. The first method is far more difficult.
C. A. R. Hoare, The Emperor's Old Clothes
, 1980 Turing Award Lecture
againstthe tool is possible, but hard and rarely done
RESTin his Ph.D. thesis
application-level protocol
offline mode. HTML5, however, introduces the ability to design and build offline-capable applications. One important part of that is local storage, the ability to persistently store data on the client. The other important part is the application cache, the ability of a Web-based application to list all the resources that are necessary for offline mode. Clients can then reliably store all these files locally for offline capabilities.
work offlinecommand)
online/offline
just optimization
hints
updatingthe cached application is only possible in online mode
aggressive
interface Window {
// the user agent
readonly attribute Navigator navigator;
readonly attribute ApplicationCache applicationCache;
// ....
attribute Function onoffline;
attribute Function ononline;
// .... };
interface Navigator {
// objects implementing this interface also implement the interfaces given below };
Navigator implements NavigatorID;
Navigator implements NavigatorOnLine;
Navigator implements NavigatorAbilities;
[Supplemental, NoInterfaceObject]
interface NavigatorOnLine {
readonly attribute boolean onLine; };
go offline/online
old data)
CACHE: can and should be cached by the browserNETWORK: requires a live connectionFALLBACK: pair-wise lists of fallback alternativesCACHE MANIFEST CACHE: style/default.css images/sound-icon.png images/background.png NETWORK: comm.cgi FALLBACK: / /offline.html
interface ApplicationCache {
// update status
const unsigned short UNCACHED = 0;
const unsigned short IDLE = 1;
const unsigned short CHECKING = 2;
const unsigned short DOWNLOADING = 3;
const unsigned short UPDATEREADY = 4;
const unsigned short OBSOLETE = 5;
readonly attribute unsigned short status;
// updates
void update();
void swapCache();
// events
attribute Function onchecking;
attribute Function onerror;
attribute Function onnoupdate;
attribute Function ondownloading;
attribute Function onprogress;
attribute Function onupdateready;
attribute Function oncached;
attribute Function onobsolete;
};
closedapplication scenarios rely on QR tagging
Applicationsmay be more trustworthy than
the Web
trustedthan computers (but more trustworthy?)
magicemail address)
embeddeddevices (e.g., iPhone)
live capture)
multipart messages
attachments
MMS URIs
MMS URIswould take a while
Hardware accessis traditionally limited on the Web
Multimediaapplications often bypass standard Web technologies
missing functionality
mobile-awaredesigns
Tight Couplingvs.
Loose Coupling
Bridging the front-end and the back-end
Interaction Designof users (i.e., user agents) and services
competition, describe what is different
Non-Use-Casescan be helpful as well
data entry
input?
Separation of Concernshelps to better describe scenarios
terrain viewavailable as a
layer
My Mapsavailable as individual layers
polished experiencethan the iPhone
Add to Home Screenmenu
Shortcuts
Bookmark
connected devices)
external data
yesterday's ODL) may make data entry easier
records
sign upprocess
|
|
|
|
speaking HTTPis a Web server
Web front-endof the application
back-endof the application
first line of defensefor the servers
bestdelivery point in the network
/usr/local/apache/bin/httpd -f /usr/local/apache/conf/httpd.conf
httpd.conf is the global server configuration.htaccess files are read before a request is processedAllowOverride.htaccess has a noticeable performance impact (for high load).htaccess uses the same configuration syntax as httpd.confhidden identities(the
real identityis not visible)
identifiedby an )
trusted state
trusted statecan be left
htpasswd -c …/passwords.txt dret
GET /drectures/mobapp-spring10/src/basic/basic.html HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 (.NET CLR 3.5.30729) Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-us,en;q=0.7,de-de;q=0.3 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://localhost/drectures/mobapp-spring10/src/basic/ If-Modified-Since: Wed, 07 Apr 2010 16:54:02 GMT If-None-Match: "a00000002d8d8-160-483a868c94a7c" Cache-Control: max-age=0 HTTP/1.1 401 Authorization Required Date: Wed, 07 Apr 2010 17:55:05 GMT Server: Apache/2.2.9 (Win32) DAV/2 mod_ssl/2.2.9 OpenSSL/0.9.8i mod_autoindex_color PHP/5.2.6 WWW-Authenticate: Basic realm="Protected by Basic Authentication" Vary: accept-language,accept-charset Accept-Ranges: bytes Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=iso-8859-1 Content-Language: en
GET /drectures/mobapp-spring10/src/basic/basic.html HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 (.NET CLR 3.5.30729) Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-us,en;q=0.7,de-de;q=0.3 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://localhost/drectures/mobapp-spring10/src/basic/ If-Modified-Since: Wed, 07 Apr 2010 16:54:02 GMT If-None-Match: "a00000002d8d8-160-483a868c94a7c" Cache-Control: max-age=0, max-age=0 Authorization: Basic ZHJldDpzdXBlcnNlY3JldA== HTTP/1.1 304 Not Modified Date: Wed, 07 Apr 2010 17:55:12 GMT Server: Apache/2.2.9 (Win32) DAV/2 mod_ssl/2.2.9 OpenSSL/0.9.8i mod_autoindex_color PHP/5.2.6 Connection: Keep-Alive Keep-Alive: timeout=5, max=100 Etag: "a00000002d8d8-160-483a868c94a7c" X-Pad: avoid browser bug
htdigest -c …/passwords.txt "Protected by Digest Access Authentication" dret
GET /drectures/mobapp-spring10/src/digest/digest.html HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 (.NET CLR 3.5.30729) Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-us,en;q=0.7,de-de;q=0.3 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://localhost/drectures/mobapp-spring10/src/digest/ If-Modified-Since: Wed, 07 Apr 2010 16:53:43 GMT If-None-Match: "2a00000002d8e0-178-483a867a21110" Cache-Control: max-age=0 HTTP/1.1 401 Authorization Required Date: Wed, 07 Apr 2010 18:00:04 GMT Server: Apache/2.2.9 (Win32) DAV/2 mod_ssl/2.2.9 OpenSSL/0.9.8i mod_autoindex_color PHP/5.2.6 WWW-Authenticate: Digest realm="Protected by Digest Access Authentication", nonce="lsP1VKmDBAA=c14f7b87339d28d745e26b2911b0bef46792a929", algorithm=MD5, qop="auth" Vary: accept-language,accept-charset Accept-Ranges: bytes Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=iso-8859-1 Content-Language: en
GET /drectures/mobapp-spring10/src/digest/digest.html HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 (.NET CLR 3.5.30729) Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-us,en;q=0.7,de-de;q=0.3 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://localhost/drectures/mobapp-spring10/src/digest/ If-Modified-Since: Wed, 07 Apr 2010 16:53:43 GMT If-None-Match: "2a00000002d8e0-178-483a867a21110" Cache-Control: max-age=0, max-age=0 Authorization: Digest username="dret", realm="Protected by Digest Access Authentication", nonce="lsP1VKmDBAA=c14f7b87339d28d745e26b2911b0bef46792a929", uri="/drectures/mobapp-spring10/src/digest/digest.html", algorithm=MD5, response="00067dc79112f87c811e23a36ec4a5ed", qop=auth, nc=00000001, cnonce="be2bd6d9be1058b4" HTTP/1.1 304 Not Modified Date: Wed, 07 Apr 2010 18:00:11 GMT Server: Apache/2.2.9 (Win32) DAV/2 mod_ssl/2.2.9 OpenSSL/0.9.8i mod_autoindex_color PHP/5.2.6 Connection: Keep-Alive Keep-Alive: timeout=5, max=100 Etag: "2a00000002d8e0-178-483a867a21110" X-Pad: avoid browser bug
sleep)
length in bytes is even/uneven: risk of collision is 50%
length in bytes: collisions happen when data is simply replaced
collision)
MD5 Hash Function→
e367cdcfd2e16f28e81bbc58c9d3339c
SHA-1 Hash Function→
afd38b77186afba44123093827c2e0f3732726c4
handshake)
record layer)
levelsof certificates
lock iconallows users to inspect security
trusted 3rd partiesin this scenario is not easy
external site verificationcan easily be forged
lock-inare important questions
trusted computing platform
Jailbreakingthe iPhone is disabling this authentication chain
unsignedapplications
mash-ups
mash-apps
Design depends largely on constraints.
Charles Eames, What is Design?
, An Interview with Charles Eames
HTML5 has no camera API)
Firefox has no SQL support)
widget-likebehavior
browser-based debuggingyields cross-platform results
cd ~/mobapps-logs
mobapps_access_log is the access log of the servermobapps_error_log is the error log of the servertail -f mobapps_access_log
tail -f mobapps_access_log | grep "/~dret"
neverchange (code and chrome)
GET /4026/4519445803_06922b9171_b.jpg HTTP/1.1 Host: farm5.static.flickr.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 (.NET CLR 3.5.30729) Accept: image/png,image/*;q=0.8,*/*;q=0.5 Accept-Language: en-us,en;q=0.7,de-de;q=0.3 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.flickr.com/photos/dret/4519445803/sizes/l/ HTTP/1.1 200 OK Date: Fri, 16 Apr 2010 17:02:20 GMT Content-Type: image/jpeg Connection: keep-alive Server: Apache/2.0.52 (Red Hat) Cache-Control: max-age=315360000 Expires: Mon, 28 Jul 2014 23:30:00 GMT Last-Modified: Wed, 14 Apr 2010 04:57:32 GMT Accept-Ranges: bytes Content-Length: 361084 X-Cache: MISS from photocache510.flickr.gq1.yahoo.com X-Cache-Lookup: MISS from photocache510.flickr.gq1.yahoo.com:81 Via: 1.1 photocache510.flickr.gq1.yahoo.com:81 (squid/2.7.STABLE6)
improvecaching
packagedas an
application
NSURLRequest is the iPhone OS API for requesting URIsNSURLRequestCachePolicy allows to set the cache policy for a requestmod_expires supports a wide variety of settingsETag is a server-assigned identifier for a response entitysomething relevanthappens to the resource
inode-size-timestampFileETag INode MTime Size
inode valuescorrectlyas possible
FileETag MTime Size
.mobi · WURFL
host |
www.cylog.org |
user-agent |
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 (.NET CLR 3.5.30729) |
accept |
text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 |
accept-language |
en-us,en;q=0.7,de-de;q=0.3 |
accept-encoding |
gzip,deflate |
accept-charset |
ISO-8859-1,utf-8;q=0.7,*;q=0.7 |
Keep-Alive |
115 |
connection |
keep-alive |
referer |
http://www.google.com/search?q=http+header+display&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a |
content-length |
0 |
GET / HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 (.NET CLR 3.5.30729) Referer: http://www.rexswain.com/httpview.html Connection: close
HTTP/1.1 200 OK Date: Mon, 19 Apr 2010 16:43:41 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Set-Cookie: PREF=ID=c28e991dec69844c:TM=1271695421:LM=1271695421:S=ubsNGUpXiUn3I2mg; expires=Wed, 18-Apr-2012 16:43:41 GMT; path=/; domain=.google.com Set-Cookie: NID=33=YSu8-UTI70uOYYVs4Q1AlCK017SE_w6nL_3ApNfs_mM_FdGs6-plZ2IsxR6awHC8Gssg49FxWC-uOpdMJv1PmEiKYq0YEkMeJn79DQd6SdjTfjwrcfwyL3FHSYHwRMKW; expires=Tue, 19-Oct-2010 16:43:41 GMT; path=/; domain=.google.com; HttpOnly Server: gws Connection: close
<!doctype html><html
compression
mod_deflate supports a wide variety of settingsbuckets
typein the
Mozilla/5.0 (iPad; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10
Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A543a Safari/419.3
http://m.example.com/some/page
URI navigation
http://example.mobi/some/page
mobi DNS TLD to identify the mobile pagehttp://example.com/mobile/some/page
mobileas the first path segment of the URI path
URI navigation