Re: [w3c/permissions] Clarify when a site is allowed to display the permission prompt (#245)

It would be nice to write down some assurances for developers about what coding patterns are "allowed" for showing permissions, but I don't know what we could actually write on the topic. We want to allow browsers to keep acting against patterns that abuse user attention, so any agreement about when we'll allow prompts needs to be resilient against novel forms of abuse.

Even the double-opt-in that's used on https://blog.pushpad.xyz/2020/04/the-double-opt-in-for-web-push-notifications/ is abusive, since it asks the user about notifications (within page UI) without any indication the user actually wants to pay attention to the site in the long run. It's not a form of abuse we know how to block yet, but this spec shouldn't prevent us from trying to do so.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/issues/245#issuecomment-866192767