Adobe Systems AIR 1.0

  • Review
  • Specs
  • Images
  • User Reviews
  • Buy Now
Adobe Systems AIR 1.0
  • Adobe Systems AIR 1.0
  • Adobe Systems AIR 1.0
  • Adobe Systems AIR 1.0

Bottom Line

A blinding debut release, Adobe AIR 1.0 lowers the skills requirements and costs for desktop deployment by leveraging a cross-platform runtime (from a single code base) and familiar Web technologies. Developers can take advantage of streamlined interfaces and a persistent local data store to give rich Web apps a native look and feel — including offline functionality.

Would you buy this?

Adobe's rich internet application (RIA) toolkit lifts Flash and AJAX out of the browser and on to the desktop. Adobe AIR 1.0 shines with light technical requirements and good features, but security and OS integration could go deeper.

Adobe AIR 1.0 brings new hope to Web developers looking to combine the global connectedness of browser-based applications with the persistence and functionality of first-class, local desktop apps.

AIR (it stands for Adobe Integrated Runtime) packages a host of Web technologies and enables RIAs to run outside of the browser on the user's local desktop. Those underlying technologies can be Adobe's own Flex, Flash and ActionScript, for example, or just plain old HTML, CSS, JavaScript and AJAX libraries.

The resulting application gains access to OS features such as dragging and dropping to and from the local file system, clipboard access for cutting and pasting between AIR and other applications, network connectivity, encrypted local storage and, perhaps most noteworthy, offline functionality. Thanks to AIR's persistent, local SQLite data store, AIR apps continue to function without a network connection.

Further, AIR apps don't require Web developers to learn anything new. They can easily create AIR apps using the tools and techniques they already know. Because AIR is cross-OS compatible, the same application code can be deployed to Windows, Mac and, eventually, Linux systems. An alpha version of AIR for Linux is available at Adobe Labs.

Pieces of AIR

Adobe AIR comprises several components. The SDK is a command line toolkit for packaging and deploying Web applications as AIR apps. It includes a schema template for generating the AIR manifests (which define various properties of each application including name, security certificate, and files included within the package), APIs for the framework, a service monitor and a command line debugger that lets you do some testing without first needing to package up your app. The entire lot is available for free and open sourced under the Mozilla Public Licence.

AIR incorporates dual engines — the Flash/ActionScript JIT and WebKit — to support applications built in either Flex/Flash/MXML or HTML/JavaScript. AJAX developers can run AIR without ever needing to learn ActionScript.

The underlying application components are packed into an AIR installer file, which is little more than a zip file containing program assets, the XML manifest and a digital certificate to verify authenticity.

The command line tools are easy enough to work with, and you can use any text editor to create an AIR app. Adobe provides plug-ins for creating AIR applications in Flash CS3 and Dreamweaver CS3, as well as third-party tools such as Aptana Studio.

However, we recommend you try Adobe's new commercial development tool, the Flex Builder 3.0 IDE. Based on Eclipse, Flex Builder provides easy graphical tools for laying out GUIs, binding to servers and data sources and generating the underlying MXML code.

AIR apps can take advantage of protocols including FTP, AMF (ActionScript Messaging Format), JSON, SOAP and RTMP (Real Time Messaging Protocol for streaming media), and they can communicate with Adobe LiveCycle and BlazeDS servers using server-side RPC and messaging calls.

We found decent support for popular JavaScript libraries, including Dojo (which now also supports AIR) and Adobe's own Spry kit, allowing developers to make use of familiar tools. The resulting AIR application can look and feel like a native app, using the operating system's "chrome" for menus and so on, or can be customised to your designer's heart's content. For the end-user, an initial 11MB download is necessary to get started, but subsequent application installs and updates are far more seamless.

Going native

Clipboard access and drag-and-drop interaction with the file system notwithstanding, AIR's access to native code libraries and the underlying OS could be deeper. For example, AIR lacks a USB API, and although printing is supported, printing of images is limited to raster renderings versus full-vector support.

AIR's independence from native libraries provides a cleaner experience, but access to native code could provide not only better performance (particularly for calculation-intensive processes), but also a richer set of pathways to existing code/routines and the ability to launch local apps for specific file types.

Similarly, although security is thoughtfully addressed, it too could go further. First the good news. Local storage is protected by 128-bit encryption. AIR apps can be digitally signed and verified at runtime (via VeriSign or Thawte certificates). Administrators can control (via OS registry key) which AIR apps may be installed on a local system (trusted source only, for example, or none at all), and whether they can be updated automatically or uninstalled.

And because AIR apps are treated as native, personal firewalls can examine and block AIR applications on an individual basis (versus merely identifying the AIR runtime).

However, given the level of potential exposure — AIR can write to any location on the hard disk and gain immediate network access — we would like to see Adobe tighten the controls over system access. Although self-signed apps alert users with an "unknown signature" warning, these unverifiable apps, if installed, gain the same permissions and unfettered access to the underlying OS as verified apps.

Because AIR is in essence a proxy, Adobe could implement ways to control, say, whether a cookie may be written outside the local directory, or when an existing file may be overwritten. Let the user decide what level of control to apply, but we could use something better than the existing open-door policy. We hope Adobe will see fit in a future version to allow users to fine-tune permissions for each app during install.

Adobe does offer best-practice guidelines for developers. Nevertheless, we submit that many Web developers lack the technical savvy to effectively safeguard security. It's only a matter of time before some clever ne'er-do-wells begin exploiting remote data sources through local access vulnerabilities unknowingly left open to attack.

That said, AIR does fortify against malicious code injections. The two-level sandbox framework, which restricts the access of untrusted application routines to AIR's APIs, does help protect developers from themselves.

Grab some AIR

AIR will not be suitable for every application. Personally, we're quite content to use a browser for most things. But for enterprise dashboards and occasionally connected apps, as well as for many consumer-facing and marketing sites, breaking free of browser-badging and Web constraints makes a lot of sense.

On the enterprise front, companies such as Model Metrics (for Salesforce.com) and Business Objects are busy breathing AIR into their systems. There are also a number of projects under way to let AIR eventually tap native code via cross-compilation with ActionScript (for example, to migrate existing C++ or .Net applications).

Easy migration of legacy apps running on a freely available distribution of Linux (assuming Adobe follows through on the port) will be irresistible to many companies, and Adobe AIR's ability to reduce hurdles to desktop application deployment makes it a must-see. Still, we think we're seeing only the first hint of turbulence in a coming wave of disruption.

Adobe is far from the only company clamouring for a piece of the RIA action. But we find Adobe AIR 1.0 well ahead of the pack today, in functionality, ease of execution, and overall efficacy of the final product. AIR blurs the distinction between Web, desktop and user devices in ways that we've only begun to explore. Oh, and did we mention that it's free?

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Be the first to comment.

Post new comment

Users posting comments agree to the PC World comments policy.

Login or register to link comments to your user profile, or you may also post a comment without being logged in.

Most Popular Reviews

Follow Us

Best Deals on GoodGearGuide

Shopping.com

Latest News Articles

Resources

GGG Evaluation Team

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Steph Mundell

LIFEBOOK UH574

The Fujitsu LifeBook UH574 allowed for great mobility without being obnoxiously heavy or clunky. Its twelve hours of battery life did not disappoint.

Andrew Mitsi

STYLISTIC Q702

The screen was particularly good. It is bright and visible from most angles, however heat is an issue, particularly around the Windows button on the front, and on the back where the battery housing is located.

Simon Harriott

STYLISTIC Q702

My first impression after unboxing the Q702 is that it is a nice looking unit. Styling is somewhat minimalist but very effective. The tablet part, once detached, has a nice weight, and no buttons or switches are located in awkward or intrusive positions.

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?