[w3c/push-api] Question: what about shared device (Issue #353)

As i understood, endpoint is done against browser. So what happens if 2 users use same browser ?

- user1 subscribe to notifications; then log out
- user2 use the same device (let say a desktop) and same browser and subscribe to notifications
- user2 will receive user1 notifications !
- coming back user1 will receive user2 notifications...

I know a solution could be to unregister service worker on user1 logout, but what about session expiration ? And i imagine unregister sw could have related miss configuration (no more notification ?)

I'm not sure to be clear, but did someone have this situation to take care ?
Thanks

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/push-api/issues/353
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/push-api/issues/353@github.com>