[w3c/push-api] PushSubscription and underlying concept should be better separated (Issue #373)

At the moment it seems as if you'd store the private key on an internal slot of the JS object, which isn't safe.

The JS object is also created "in parallel" which doesn't actually work. It needs to be created as part of the steps of the eventual queued task.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/push-api/issues/373
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/push-api/issues/373@github.com>