Re: [w3c/permissions] Only allow permissions.request() during user interaction (#77)

I'm much more comfortable having this be 'may' instead of 'must', for a couple of reasons:
- I haven't seen any clear data to say that even with Chrome's UX, prompts from gestures have better response rates. It's intuitive that this would be the case but there isn't any actual data yet. I'm working on the necessary reporting in Chrome to get this data.
- If we want to enforce gesture I think we should do this no matter which API is used. E.g. if we think geolocation prompts should require gestures, we should ensure this is the case regardless of which API is used. This might be hard (i.e. necessitate changing existing APIs) but it is preferable to having one API enforce it and another not.

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/issues/77#issuecomment-223861405