JSONP
Infrastructure
cors proxy
SHOW HN2012
51points
33comments
#466of 1,677 in 2012
Top 28%of 2012 by points
How HN took it
MixedNo clear lean
1 positive, 8 neutral or asking, 1 mixed, 9 critical, out of 19 comments about the project. Thread score -0.35.
Idea: 0 for, 3 againstPrivacy: 0 for, 3 againstExecution: 0 for, 2 againstPerformance: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Useful for quick prototyping and development
From 2 comments
1a -- you aren't just trusting this site, you are trusting everyone since the API keys can be found within the source. 3 -- it is even simpler than that; the source can be found…
jaredsohn on HN:P sweet
rohan_me on HN
Service is useful while still developing
From 1 comment
1a -- you aren't just trusting this site, you are trusting everyone since the API keys can be found within the source. 3 -- it is even simpler than that; the source can be found…
jaredsohn on HN
Objections
Unreliable for production or revenue-generating use
From 1 comment
How reliable is this service trying to be? While I think it is a cool service if a person is just hacking around, it is not something I would use with any revenue generating…
howardr on HN
Security concerns: API keys and proxying arbitrary content
From 2 comments
While useful, there are a few implications 1) security ``` a) I won't trust you with my API keys b) If you get hacked, ANY javascript can be executed on my pages ``` 2)…
rorrr on HNI thought this was going to be about https://github.com/jaubourg/jquery-jsonp but apparently not. I wouldn't trust it, personally, though I see its uses.
Jach on HN
Simple to reimplement with a few lines of server code
From 2 comments
While useful, there are a few implications 1) security ``` a) I won't trust you with my API keys b) If you get hacked, ANY javascript can be executed on my pages ``` 2)…
rorrr on HN1a -- you aren't just trusting this site, you are trusting everyone since the API keys can be found within the source. 3 -- it is even simpler than that; the source can be found…
jaredsohn on HN
Scalability and sustainability of a free service
From 2 comments
Maybe you could make a signup with Stripe or Paypal or something so that people could pay $5 or $10 per month to use it.. that way you would have enough money to at least pay for…
ilaksh on HNWell, based on the comments it sounds like you've exposed a need. People want it to be stable and don't seem comfortable with the idea of it being your hobby. Make them pay for…
tomkin on HN
Requests
Monetise with paid plans to fund hosting and maintenance
From 2 comments
Maybe you could make a signup with Stripe or Paypal or something so that people could pay $5 or $10 per month to use it.. that way you would have enough money to at least pay for…
ilaksh on HNWell, based on the comments it sounds like you've exposed a need. People want it to be stable and don't seem comfortable with the idea of it being your hobby. Make them pay for…
tomkin on HN
Support changing the user agent for requests
From 1 comment
One things these services often lack is the ability to change the user agent before making the request. For awhile, if one wanted to make use of Pinterest's API, they would just…
jaredsohn on HN
Make the CORS relay role more explicit in docs
From 1 comment
And in case anyone is wondering, that's how the Easier option is implemented (CORS), whereas the Easy option is just JSONP. OP could probably make it more explicit since it's not…
lunaru on HN
Questions
How much traffic can it handle and will it scale?
From 2 comments
Maybe you could make a signup with Stripe or Paypal or something so that people could pay $5 or $10 per month to use it.. that way you would have enough money to at least pay for…
ilaksh on HNWhile useful, there are a few implications 1) security ``` a) I won't trust you with my API keys b) If you get hacked, ANY javascript can be executed on my pages ``` 2)…
rorrr on HN
Why use this instead of Yahoo's YQL?
From 2 comments
1a -- you aren't just trusting this site, you are trusting everyone since the API keys can be found within the source. 3 -- it is even simpler than that; the source can be found…
jaredsohn on HNcool service, I hope it remains up so we can depend on it. Currently you can accomplish the same thing using Yahoo's YQL, if you'd rather trust a big company to stay up. Here's…
apsurd on HN
Alternatives named
Yahoo YQL
From 3 comments
cool service, I hope it remains up so we can depend on it. Currently you can accomplish the same thing using Yahoo's YQL, if you'd rather trust a big company to stay up. Here's…
apsurd on HNor you could use http://developer.yahoo.com/yql/console/
shaydoc on HN1a -- you aren't just trusting this site, you are trusting everyone since the API keys can be found within the source. 3 -- it is even simpler than that; the source can be found…
jaredsohn on HN
CORS
From 1 comment
CORS is more secure than JSONP. http://en.wikipedia.org/wiki/Cross-origin_resource_sharing
mike_organon on HN
easyXDM
From 1 comment
Obligatory: https://github.com/oyvindkinsey/easyXDM
beggi on HN
Apache reverse proxy
From 1 comment
I tried this once with a proxy script and it eventually lead to inconsistencies. I've settled on using an apache reverse proxy when I need to do cross-domain json posts…
willtheperson on HN
jquery-jsonp
From 1 comment
I thought this was going to be about https://github.com/jaubourg/jquery-jsonp but apparently not. I wouldn't trust it, personally, though I see its uses.
Jach on HN