Re: [w3c/push-api] Describe process for subscription updates (#132)

What prevents evilonastick.com from setting a web hook that points to
kittens.com? There are legit reasons a site may pick a different domain for
user management.
On Jun 10, 2016 8:30 PM, "Mohamed Hafez" <notifications@github.com> wrote:

> @kitcambridge <https://github.com/kitcambridge> I think the best solution
> would be the following: there could be a general ServiceWorker function
> that takes a webhook as its parameter, and auto-retries it in a standard
> and reliable way. In the pushsubscriptionchange event, the developer
> would pass their particular webhook to this function, and then take care of
> any local state stuff. pushsubscriptionchange only gets triggered once to
> prevent abuse, but the webhook still gets retried reliably by the function.
>
> —
> You are receiving this because you were mentioned.
> Reply to this email directly, view it on GitHub
> <https://github.com/w3c/push-api/issues/132#issuecomment-225329189>, or mute
> the thread
> <https://github.com/notifications/unsubscribe/AACLq1Az3NXOCsThTayuNumFcfLV1dx4ks5qKg_HgaJpZM4D0OXG>
> .
>


---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/push-api/issues/132#issuecomment-225329678