Re: [w3c/permissions] Clarify when a site is allowed to display the permission prompt (#245)

Respectful patterns for push notifications on blogs tend to involve a [subscribe] button that the user clicks before being asked to allow push notifications. A respectful pattern for geolocation tends to be a 'use my current location' button whose click causes the prompt. Disrespectful flows start from a site author realizing that they make more money when users grant permissions, so they ask before the user has expressed interest. Drawing a prompt like the browser's inside page UI doesn't make that prompt respectful, even if it makes it harder for browsers to block. 

The practical advice is to build flows that make users happy and avoid manipulating or annoying them into granting permission. I don't know how to write that into a specification in any sort of normative way. We could think about something analogous to https://webkit.org/tracking-prevention-policy/, where we describe some non-normative principles for thinking about what kinds of flows are respectful, but even that doesn't guarantee we'll never wind up [accidentally blocking](https://webkit.org/tracking-prevention-policy/#unintended-impact) a prompt that a human would consider respectful.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/issues/245#issuecomment-866280969