Re: [manifest] Native API Permissions (#319)

>>  We still have the problem of the preconditions: before we can add permissions to manifests, there needs to be some W3C or WHATWG API that multiple vendors are willing to implement that would require permissions to be used in the manifest.

> Right now, we don't have that AFAICT. 

Wouldn't @benfrancis's proposal help solving the issue of the [missing trusted app model identified in SysApps WG](http://www.w3.org/2014/07/permissions/minutes.html)? W3C drafts already highlighted the need for such restricted permissions,  e.g. [TCP and UDP sockets](http://www.w3.org/TR/2014/WD-tcp-udp-sockets-20141202/#security-and-privacy-considerations). It has not been as far as defining the permission because there is no way to restrict it as of today. Looks like a chicken & egg problem...


---
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/319#issuecomment-77657054

Received on Friday, 6 March 2015 23:45:42 UTC