Re: [w3c/permissions] Allow Feature Policy-based permission models (#185)

Firefox user clicks on nytimes.com's (hypothetical) *Live video support*, and sees this prompt:
```
Will you allow nytimes.com to use your camera and microphone?

☐ Remember this decision

Don't Allow                                         Allow
```
They check `☑ Remember this decision` and click `Allow`.

They're done with that and now go to `nytimes.com`'s *Live video chat with author Ian Famous*, and they see the exact same prompt again, wondering why Firefox didn't remember their decision?

It's because the second request came instead from iframe `authors.fameo.us`, and even though Firefox was *"free to say something like "nytimes.techsupport.fr" doesn't have access but the top level frame (nytimes.com) does have access so grant access to the iframe"*, it's not allowed to **persist** said access to nytimes.com because it doesn't have *"new information about the user’s intent for"* nytimes.com, since that site is not *"this realm and other realms with the same origin"* (as nytimes.techsupport.fr). 


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/issues/185#issuecomment-519120699