Re: [w3c/manifest] Ability to claim web app (#476)

> I don't understand OP. Claim it where? How is this different from origins?

So, IIUC, what the OP is asking is for a means for a store to verify that a developer is actually in control of a domain. 

Google, today, does this by asking the developer to prove ownership of said site by: 

 * setting `meta`
 * Upload a file
 * setting a DNS record

By forcing developers to prove that they do, in fact, own a particular web application (by including a magic token in the manifest), it gives a store a trust model: allowing the web application to be listed in that store (and possibly more things on the store site)... the same way that this allows developers today to use Google's "Search Console". 

This prevents bad actors from listing sites they don't own in a store, because without including this magic key, they can't get listed in the store. 
 

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/476#issuecomment-230975532