Comments on: Twitter kills flash apps http://team.bkwld.com/2008/03/15/twitter-kills-flash-apps/ Team BKWLD Tue, 06 Jan 2009 09:46:29 +0000 http://wordpress.org/?v=2.0.7 by: Zach http://team.bkwld.com/2008/03/15/twitter-kills-flash-apps/#comment-2305 Fri, 21 Mar 2008 06:26:05 +0000 http://team.bkwld.com/2008/03/15/twitter-kills-flash-apps/#comment-2305 Flickr also went through some of the same issues way back... which is why their API endpoint is api.flickr.com, and they moved the crossdomain to that domain and removed it from flickr.com. other APIs do OAuth and use yahooapis.com as the API end-point. The sad part is that adobe will be further tightening the security in Flash in their next update. But, remember you can always use a server-side proxy ;) Flickr also went through some of the same issues way back… which is why their API endpoint is api.flickr.com, and they moved the crossdomain to that domain and removed it from flickr.com. other APIs do OAuth and use yahooapis.com as the API end-point.

The sad part is that adobe will be further tightening the security in Flash in their next update. But, remember you can always use a server-side proxy ;)

]]> by: Robert http://team.bkwld.com/2008/03/15/twitter-kills-flash-apps/#comment-2266 Tue, 18 Mar 2008 14:44:03 +0000 http://team.bkwld.com/2008/03/15/twitter-kills-flash-apps/#comment-2266 One of the suggestions from that link, interesting. 1. Move the Twitter API to api.twitter.com. Use the completely permissive crossdomain.xml on api.twitter.com. 2. Stop supporting HTTP Basic auth. on api.twitter.com. Implement OAuth or some other kind of auth. token system. 3. Require non-public API requests to include a valid user auth. token. One of the suggestions from that link, interesting.
1. Move the Twitter API to api.twitter.com. Use the completely permissive crossdomain.xml on api.twitter.com.
2. Stop supporting HTTP Basic auth. on api.twitter.com. Implement OAuth or some other kind of auth. token system.
3. Require non-public API requests to include a valid user auth. token.

]]>