Re: [w3c/manifest] Allow manifest processing to be invoked without going through an HTML document (PR #1069)

@mgiuca commented on this pull request.



> +            In this case, the user agent SHOULD ensure that, at least at some
+            point in the past:

By the way, the "at least some point in the past" clause was to acknowledge that we don't need the user agent to verify this exactly at install time. It's sufficient to have verified this at the time you cached it (e.g. if you install on Machine A, you verify this, then sync the metadata to Machine B and install it, you don't need to verify it again on Machine B).

We thought about writing "at the time of fetching the metadata" but we wanted to also allow a situation where you verify it on Machine A, then you sync the manifest URL to Machine B, Machine B fetches the manifest but does not re-verify this condition. So we settled for the more permissive "at some point in the past".

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/pull/1069#discussion_r1178518773
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/manifest/pull/1069/review/1403019678@github.com>