Re: [w3c/manifest] Ability to dynamically change app icon (#663)

@aetinx no it’s not.

Imagine a user installs an app, forgets it, then tries to see his bank applications one day, opens it, enters login and password and viola – understands it’s not a bank application but a different application portrayed as bank application.

In web, there are sometimes attempts to do the same. Only they have to register similar domains to the services they try to pretend to be. This is usually not really effective as users can see the url. But with the case of PWA apps, there’s no url, just icon and title, and it’s much harder to see such a fraud.

I would still agree that this feature is still very much needed. Unfortunately, it would require much more groundwork to solve this security issue. I described the potential solution a comment above.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/663#issuecomment-1935923304
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/manifest/issues/663/1935923304@github.com>