Re: [manifest] How does updating work? (#384)

> Doesn't scope allow the service owner to solve this?

Yes scope is intended to define the URL scope to which the manifest applies. But the default scope was unfortunately decided to be unbounded, which would mean that if we used this as an indicator of which pages could potentially provide a new manifest with a new manifest URL, any page from any site on the web could overwrite the manifest for any other site...

There are just too many footguns for developers.

Again, the obvious solution is that a manifest URL should identify an app, and should not be allowed to change.

---
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/384#issuecomment-119575715