Re: [w3c/permissions] Add another permission state "always-ask" (from one-time grants)? (Issue #414)

`.query()` was always a mistake, especially when it could be used for a script to ensure that the user won't be prompted -- it means that the script can safely access the user's information without the user knowing.

So it seems a strict improvement to me that "granted" might sometimes mean there will be a prompt. And if the spec doesn't allow that (I think it does, but we could make it more explicit), then we should just clarify that it does. Providing even more detail about what the user has seen in the past doesn't seem good: it just introduces fingerprinting surface and would be better as a cookie value.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/issues/414#issuecomment-1721511639
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/permissions/issues/414/1721511639@github.com>