What is JSON, JSON-RPC and JSON-RPC-Java?

Michael Clark writes "Seen those funky remote scripting techniques employed by Orkut, Gmail and Google Suggests that avoid that oh so 80's page reloading (think IBM 3270 only slower). A fledgling standard is developing to allow this new breed of fast and highly dynamic web applications to flourish. JSON (JavaScript Object Notation) is a lightweight data-interchange format with language bindings for C, C++, C#, Java, JavaScript, Perl, TCL and others. It is derived from JavaScript and it has similar expresive capabilities to XML. Perfect for the web as doesn't suffer from XML's bloat and is custom made for our defacto browser language. JSON-RPC is a simple remote procedure call protocol similar to XML-RPC although it uses the lightweight JSON format instead of XML (so it is much faster). The XMLHttpRequest object (or MSXML ActiveX in the case of Internet Explorer) is used in the browser to call remote methods on the server without the need for reloading the page. JSON-RPC-Java is a Java implementation of the JSON-RPC protocol. JSON-RPC-Java combines these all together to create an amazingly and simple way of developing these highly interactive type of enterprise java applications with JavaScript DHTML web front-ends. " Click below to read more about it. "Now is the turning point. Forget that horid wait while 100K of HTML downloads when the application just wanted to update one field on the page. The XMLHttpRequest object has made it's way into all the main browsers with it's recent introduction into Opera and Konqueror (sans the Konqueror bug). This new form of web development now works on Internet Explorer 5, 5.5, 6, Mozilla, Firefox, Safari 1.2, Opera 8 Beta and Konqueror 3.3 (with a much needed patch). Appeal to Konqueror users - please log into the KDE bugzilla and vote on this bug so you to can experience this wonderful thing. More details here: http://oss.metaparadigm.com/jsonrpc/ "

Comments

Javascript security???

[bradbury]

Great! Another proposal for using a scripting language that one does not have the source code for (at least in IE, Opera and probably other browsers), and is *NOT* a standardized language (what approved "forum" such as ANSI or ISO has standardized Javascript?) AND is known in its various forms to crash browsers (e.g. Netscape 4.79 that people will still choose to use because it is still faster in many situations than Firefox) AND isn't even available in the more simple browsers (does anyone even remember Mosaic?)

The use of Javascript and Java -- i.e. languages that run code on *your* computer, vs. HTML which is a display language should be discouraged until there is some responsible independent body that has verified them as "secure".

There is a question of "trust" levels here. And in my experience I don't "trust" anything whose source code I have not reviewed or has not been reviewed by people whom I can trust. And that is simply not the case with most or all of the scripting languages currently available.

Thus their use should be discouraged.