- From: Christian Biesinger <notifications@github.com>
- Date: Thu, 07 Sep 2023 15:41:39 -0700
- To: w3ctag/design-reviews <design-reviews@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
- Message-ID: <w3ctag/design-reviews/issues/884/1710851298@github.com>
1. Yes, an IDP could decide not to send the signed-out signal, however this would not give them silent requests, the browser would show a "mismatch" dialog. See the "If the sign-in state was “signed in" bullet point in https://github.com/fedidcg/FedCM/blob/main/proposals/idp-sign-in-status-api.md#effect-on-fedcm-requests. We think this dialog will encourage IDPs to send the signed-out signal, but again, even if they do not this is not silent and it's also a onetime thing (we set the status to signed-out in this situation) 2. I just filed https://github.com/WebKit/standards-positions/issues/250. We had informal conversations with Mozilla and they seem supportive; [they prefer](https://github.com/fedidcg/FedCM/issues/431#issuecomment-1425025469) commenting on [PRs](https://github.com/fedidcg/FedCM/pull/436) instead of standards positions for changes to FedCM. We want to continue these conversations at TPAC. 3. Firefox is [prototyping](https://groups.google.com/a/mozilla.org/g/dev-platform/c/ncmUwK1uO98/m/COhPA4ZrAAAJ) FedCM, current work behind a pref (`dom.security.credentialmanagement.identity.enabled`). Safari is [“generally supportive”](https://lists.webkit.org/pipermail/webkit-dev/2022-March/032162.html). Brave also seems supportive towards a [“more promising future”](https://brave.com/privacy-updates/24-google-sign-in-permission/). 4. We are hoping to make some progress on this during TPAC and had discussions in the Privacy CG; we are in the somewhat unfortunate position that we are trying to not ship something that is similar to but incompatible with is-logged-in, but at the same time is-logged-in is not ready. Hence, we are trying to specify something that is likely compatible with that API, should it end up shipping. -- Reply to this email directly or view it on GitHub: https://github.com/w3ctag/design-reviews/issues/884#issuecomment-1710851298 You are receiving this because you are subscribed to this thread. Message ID: <w3ctag/design-reviews/issues/884/1710851298@github.com>
Received on Thursday, 7 September 2023 22:41:46 UTC