Re: [w3ctag/design-reviews] TAG Review Request: User Activation API (#300)

At first glance, the cross-origin thing doesn't appear any different an origin's existing ability to `postMessage` to another origin, but with the addition of the ability to have a piece of that message vouched for by the browser.  That doesn't seem scary to me.  Or is there a different way I should be looking at it?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/300#issuecomment-423694149