World: r3wp

I systematically hate everythings which "calls home"  even for updates.

this must be a setting, even if it should be in the user's interest 
for it to be automatic.  simply because it raises trust.

in the least, ask -before- checking or  allow through options to 
disable automatic updates.  simply cause automatic updates can break 
things which where working.

How long is the 1.3.* plugin going to be in use before the 3.0 plugin 
is out? If it isn't that long, can we just plan for its obsolescence?

the fact that they are considering the 1.3 plugin I think says it 
all.

Josh, I prefer: ask before download + install, notify afterwards 
of success or failure.

And the side-by-side approach is good, as long as each version is 
clearly indicated.

I'm curious as to how many people are actually deploying the plugin 
currently?

Or, is this a chicken and egg situation?

I agree with Maxim. Most people out there in the world don't have 
any reason to trust Rebol or Rebol Technology. It might be just another 
spyware company for all they know. Why would they (initially) want 
to allow an automatic software corridor into their computer ? It's 
an issue of trust. First let them try it out, then when they like 
what they see, allow them to enable more automatic security updates 
if they want.

Josh, to be precise, that's:  "I prefer: ask before (download + install), 
notify afterwards..."  - where "download + install" is one operation 
from the user's point of view.

So can we store a flag somewhere in the system? 
	automatic-security-updates = true / false;

I agree with Maxim as well, there needs to be UI somewhere to stop 
automatic downloads.


With that said, is it possible to clean this whole thing up and reduce 
it to one place where you either have what you need or you don't.


Using Adobe Acrobat as an example, they have one plug-in interface.

When you download stuff, it asks you if you want any of the other 
modules Adobe has for you.  In fact a close friend of mine created 
one of those modules (Atmosphere), which is funny that Adobe's interface 
even asks if you want this, since almost no one know what Atmosphere 
is.


So a single consistent dialogue should pop up with something like 
this:

You have:

Rebol command 1.3 for OSX
Rebol view 3.0 for OSX

New modules that are available:    

[_] Rebol view 3.0 for OSX
[_] VID2 interface Alpha for OSX


[X] Always ask before downloading

[Skip] [Download all now]

Hi, I am back after one week trip to Germany, so kind of difficult 
to catch-up with all that discussions and possible aproaches ....

But I will try to express my opinion here for those various topics:

Anton - no need to run separate RAMBO imo. Just add another product 
category - browser-plugin .... should be enough to be able to filter 
out plug-in related topics .... I like RAMBO - simple and not bloated 
....

As Graham or someone else suggested - let's sort out few issues first 
- UI, installation, integration ....

1) UI - we are not Flash player, we will likely produce real-life 
apps. So - do we give up right mouse click for configuration options? 
What if you will have your own one in your app? OTOH imo there NEEDS 
to be some UI for setting some parameters! Not everything which comes 
to my mind can be hidden from user. The ones which come to my mind 
- do you want to check for updates? Once a month, week, daily, Automatic 
downloade newer version? Ask, download. Use newest version if app 
does not specify its requirement? (maybe not needed, just an example 
of what could be configurable). Proxy settings .... List available 
version, provide uninstall button, etc.

to add to UI topic - should we add default border to the area plug-in 
is supposed to be? Should we add kind of app-bar, where configuration 
could be accessed? (could cause problems with app-area calculation). 
Or maybe to make it sliding, e.g. when you stay for more than few 
secs with a mouse over the top 5% of the plug-in app area? (could 
become annoying) - just throwing ideas around ...

2) Installation - I like several versions installation - IIRC even 
Java can coexist? I use it with mozilla - I run Mozilla suite or 
Seamonkey, various versions from various locations - they do share 
profile - settings, sandbox .... 'Needs field could work for us too. 
If the app specifies it, try to locate particular version. If such 
version is not available, display dialog, where you preselect latest 
version and provide with list-box, with ability to manually choose 
from available versions ... and "run" button ....

3) Integration - the toughest part - first - old plug-in way of integration 
was not optimal. REBOL's code  of 'get-net-info is outdated and broken. 
First thing is to get proxy info automatically, if possible, but 
still allow it to be settable. Most corporate users do use proxy, 
without it, plug-in in non-existant product for corporate environment 
imo. Why to allow manual settings? Well, dunno how many companies 
do use it, but our company does :-( ..... "use script for proxy configuration" 
- and the script is JS code, which browser can interpret, but not 
rebol itself, so we need ability to set it manually


... or - second point and probably the main point from the architecture 
pov - do we allow what rebol allows? Do we allow our own networking, 
or will we allow only to tunnel via browser? One one hand, we would 
get https, on the other hand, if we limit it, we are not talking 
about rebol anymore, but sligthly different rebol based product. 
As for me, I am not able to see all the security related concerns, 
so I let it to others here ...

As for simplicity, I do agree it all has to be as much automatic 
as possible. In IE is is better than in older Mozillas - you just 
click the plug-in area and it gets downloaded and started with the 
page refresh, not even browser restart is required IIRC ...

.... on more point to UI - I really don't know, what to do with pop-ups. 
I suggest, for REBOL 3.0 View, to have rebol based windowing system, 
not to use separate native OS dialogs, or we are doomed here. Each 
view/new means new window, and ppl who are used to add-block will 
feel uncomfortable imo ....

Did anybody try Cyphre's http://www.rebol.net/plugin/moz-1/cyphre-demo.html
in Mozilla? In Seamonkey I get sligtly different results than when 
it is being run in View directly ... e.g no sound, the wheels (second 
sequence) are blinking strangerly, there some some white-page breaks 
with nothing displayed, whereas in View there is some text ... (IIRC 
e.g. Sea Dream in the beginning is missing in browser)

Pekr - "1) UI - we are not Flash player, we will likely produce real-life 
apps. So - do we give up right mouse click for configuration options?"


I have no idea what you just said here.  Flash is used to make billions 
of dollars worth of complete stand alone product, as well as complete 
websites and small stand alone application that are delivered over 
the web.  


And they can completely control the right mouse button's access to 
a menu.


So, actually, we are JUST like a flash player.  In fact "flash player" 
is a misnomer, since it moved way past "playing" and into complete 
UI years ago.  Rebol and Flash really could not be any more similar.

Reichart - it is really strange you really can't understand, what 
I am talking about ;-)

go, find whatever website flash plug-in part of website, press right 
mouse - you will see menu for controlling flash script itself ... 
that is what I am talking about - you will find flash player related 
menu, not app related menu. And IF context menu is supposed to be 
under MY control, I can't guarantee you, that there will be SINGLE 
item left to configure rebol plug-in itself .... so, for me, Flash 
context menu is nearly nonexistant = used for Flash player itself, 
not for the app ...

... and if I understood it well, we are looking for unified way of 
how to access rebol plug-in configuration .... so my concern was, 
that if someone suggested right-mouse-click here, it could not be 
regarded being safe, because app developer can request such functionality 
for app itself, and in such case, there will be no way of how to 
access it ...

Reichart - and you imo overestimate Flash's importance - they can 
be milti-whatever company, yet I would have to see some noticed real-life 
app someone uses in corporate sphere :-)

pekr, I sort of agree with you, but it's impossible to ignore how 
widespread flash is, not for apps, but for animations, stylish pages 
and now video with youtube and video.google.com. I actually think 
the easiest way to watch video is through flash.


The point is though not really what flash does, it's how it gets 
spread. I think REBOL/Plugin should emulate that behavior as close 
as humanly possible. people who have installed flash, would know 
how to install REBOL/plugin (visit a specific site, wait for download, 
click 1-2 buttons, done). That initial "installation experience" 
is incredibly important for the widespread use of REBOL/plugin. If 
people can't use it within the first 1-2 minutes, they'll forget 
about it and move on.

The problem that REBOL/plugin needs to solve is that which current 
Java applications are only moderately successfully solving. They 
are slow, Java doesn't always install that easy and the level of 
interactivity offered by Java doesn't seem to make developers use 
it for other than specialized applications.

a problem I've noticed about flash is that performance is very uneven 
under different OS'es. Macromedia...oops Adobe :-) might not prioritize 
the OSX version as highly as the Windows version. Flash for OSX is 
absurdly slow compared to other graphics engines for OSX. It alienates 
the OSX users because of those issues. REBOL/plugin may not necessarily 
suffer such crossplatform issues.

Henrik, Reichart - there is no need to reply to flash being widespread 
or not, that all is misunderstanding. I did not start talks about 
multi-billion kind of stuff ;-) My only care and point was - how, 
UI wise, do we allow to invoke rebol/plugin configuration, so let's 
please stick to it :-)

would we allow to invoke any configuration at all? what's to configure? 
SMTP settings? Possibly sound. this makes me think of another thing: 
would we want to be able to send mail through the plugin? it would 
be very easy to create a spam bot this way.

Henrik, with my suggested default network restrictions, that kind 
of security problem just won't happen without bringing up a security 
requestor that the user must agree to first.

what is there to configure? lot's of things, just read my posts ....

sorry, I missed that. How does java do it? does it use the browser 
to tunnel data?

I am not sure .... my thoughts for config were more towards if/how 
often should it check for updates, manual proxy settings, sound, 
whatever else makes sense.....

but I would too not like to complicate things, if not necessary ....

Q: go, find whatever website flash plug-in part of website, press 
right mouse - you will see menu for controlling flash script itself 
... that is what I am talking about -

A: That is a choice of the developers.  The fact that people leave 
it as "default"


Q: Reichart - and you imo overestimate Flash's importance - they 
can be milti-whatever company, yet I would have to see some noticed 
real-life app someone uses in corporate sphere :-)


A: "I" over estimate Flash?  Uh, er….you mean like how Yahoo over 
estimated Flickr (front end is Flash), and bought them?  


Or, while you might not like it, if you are looking at an animated 
ad on the web, there is a good chance it is Flash.  That would be 
a 500 billion dollar industry that is using Flash as their delivery 
mechanism.  That is the app, animated content with games and click 
through.


And if you use T-Mobile, then you are using Flash.  Yup, it "is" 
the interface for their cellphone content provider.



Pekr, I'm not a fan of Flash, or Macromedia…I'm simply stating that 
Rebol should consider Flash's model as a pathway to a clean install 
and plug-in interface.

A smart plan is simply take the plug-in that is the most pervasive 
(I'm voting Flash for this) and copy their interface.  That simple.

reichart, it's possible that pekr means that you overestimate flash 
for use in applications, but I agree, we should definitely look at 
what Flash did and copy that where applicable.

I have only seen very few actual applications written in flash myself, 
but it's used everywhere for animated graphics.

And flash works in Apple widgets.

I have seen a dozen applications used by companies.  The Neilsen 
Media company (famous for their Neilson Report of TV) uses Flash 
for all their applications.  


They could have used Rebol, but Flash is actually better for what 
they are doing.  If Rebol had more front end, or could play back 
SWF files thorugh AGG, then we might have something.


Rebol on the other hand is better for the heavy lifting, parsing 
websites, etc.

So, let's write up an overview of what is needed "exactly" to have 
a clean interface for a plug-in.  this needs to be done for 4 browsers 
(IMO): IE, FF, Safari, Opera (in that order).

See…this is where we need a wiki…like a Qwiki.

With Java, the applet is only allowed to communicate with the server 
that served up the applet. We could make that same restriction by 
default in the REBOL plugin with SECURE, and then relax the restrictions 
at runtime with SECURE again. Of course, that will cause the security 
requester to pop up and the user would then know what they should 
know and agree to anyways before such behavior is allowed at all.

how about a simple flag, like a checkforupdates="true" attribute 
or something.  Every other operation, including the sort of actions 
that are necessary to install update is handled through normal security 
requestors.  ... yeah, like Brian said :)

At least that is the case with anonymous applets. Signed applets 
may be able to do more, as signed REBOL scripts should be able to 
do as well.

Reichart - it is exactly as Henrik said - I just meant "real life 
apps", while you mentioned mostly media stuff, which is imo not Rebol's 
target and imo never will be, unless we would get some rebol authoring 
IDE, which I don't see coming in a year or two ahead ....