Re: [manifest] Handleing capabilities with Manifoldjs (#412)

I have a few questions here:

1.) it seems like this is about an extension point for a project that doesn't really need anything from this group other than a blessing for a key name for the extension point. Am I misunderstanding something?
2.) the notion of non-origin security (the scope conversation) is much larger than something we can decide here. It's asking for a wormhole across the web's single safe composition mechanism and I think the bar for standardizing it will need to be much higher; at a minimum, we need to see why `postMessage`, `<iframe>`, and foreign fetch aren't sufficient for collaboration.

---
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/412#issuecomment-160703702