Re: [w3c/push-api] Security review of Push API W3C Working Draft 23 June 2017 (#273)

Thanks @magnus-git! I've updated #274 and uploaded #286 for your latest suggestion.

I don't think we can require the user agent to clearly inform the user about this. While I agree with this in principle, user studies that we've done showed that most users are not familiar with what background usage entails, which is why Chrome (and other browsers) use the Notification permission for the Push API. Obviously this will get coverage in privacy documentation, but that's a step beyond implementation.


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/push-api/issues/273#issuecomment-323810187