Re: [permissions] Tackle origin (#34)

We've seen implementations that use pairs of origins to determine permissions; Chrome was using this for Geolocation, so that users who granted an iframe of Google Maps on one site wouldn't automatically grant it to Google Maps embedded on a different site.

That is, whether permissions are granted, or what level of prompting the UA decides is appropriate, may vary on more than just the origin.

Some other possible parameters: Was this initiated by a user action? Have several permissions recently been denied by the user? Has it been a long time since the user originally granted this permission?

---
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/issues/34#issuecomment-107072613