[Open.ogc] crossdomain.xml

[Micah Wengren]

Hi Tim,

This has come up also related to CORS support as well.  Do you know if 
there are any NOAA policies or recommendations for how crossdomain and 
CORS support should be enabled?

I know this would be necessary in order for external users to be able to 
deploy Flash web applications that can connect to our services, but I 
don't know if it is considered safe/acceptable by NOAA to put a blanket 
policy allowing all domains access via either way.

If it's not a security risk, I'd like try to support this capability as 
openly as we can, but first that question needs to be answered I think.

I know for simple JavaScript/HTML applications (like Google Maps or 
OpenLayers), our WMS overlays will work without any additional 
configuration changes.  But, this isn't enough in some cases these days.

Thanks,
Micah

On 4/17/2013 5:41 PM, Tim Haverland - NOAA Federal wrote:
> Hey all,
>
> Can anyone explain services.ogc.noaa.gov 
> <http://services.ogc.noaa.gov>'s policies on cross-domain requests?
>
> There isn't a crossdomain.xml on at 
> http://services.ogc.noaa.gov/crossdomain.xml
>
> So does that mean other domains can't access our services?
>
> Tim
>
> -- 
> *Tim Haverland*
> Geospatial Application Developer
> NOAA Fisheries Office of Science and Technology
> 1315 East-West Highway
> SSMC3 Rm 12303
> Silver Spring, MD 20910
> 301-427-8137
>
>
> _______________________________________________
> Open.ogc mailing list
> Open.ogc at list.woc.noaa.gov
> https://list.woc.noaa.gov/cgi-bin/mailman/listinfo/open.ogc

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://list.woc.noaa.gov/pipermail/open.ogc/attachments/20130418/7a8733cf/attachment.html>