[w3c/push-api] Interaction with SOP (#211)

The data that the browser provides an application comes from a service.  We sort of assume that the browser is at some point going to start enforcing origin isolation, but never really point out the place where that happens.

>From Stephen Farrell's review of the protocol parts.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/push-api/issues/211