Nice docs by @fugueish on service worker security considerations: https://sites.google.com/a/chromium.org/dev/Home/chromium-security/security-faq/service-worker-security-faq …
Consider Android: do users believe they're giving up the ability for an app to ping servers when they allow notifications?
-
-
And recall here that Android allows silent push notifications (which we do not).
-
Android has code signing and users explicitly install the apps.
- 4 more replies
New conversation -
-
-
Users don't need to search for a web application in a store and then explicitly install it. Completely different model for code signing too.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
& Web Standards TL; Blink API OWNER
Named PWAs w/
DMs open. Tweets my own; press@google.com for official comms.