Re: [w3c/manifest] Describe manifest update behavior (#1011)

> Is there any option for a UA to make a determination on the relative substance of the change?

Sure, it's all just "recommendations" after all. However, implementers would do that at their own risk because an attacker would try to abuse such heuristics if/where possible. 

We might need to add that to the Security Considerations. 

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/pull/1011#issuecomment-1041186696
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/manifest/pull/1011/c1041186696@github.com>