Re: [w3c/push-api] Security policies WRT Push traffic (#270)

Actually, it is possible to whitelist push traffic to user agents, because they tend to be consolidated around a small set of services with well-known and publicised remote addresses.

That said, I don't believe this to be a goal here, and this would be a more appropriate comment for RFC 8030.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/push-api/issues/270#issuecomment-380645021