Re: [w3ctag/design-reviews] TAG review for web app `scope_extensions` (Issue #875)

Another reason not to require each origin that passes the same-site check to host a copy of the validation file is that the UA can only validate this information at navigation time and not when the web app is installed.

At the time the web app is installed, the UA needs to be able to validate the `web-app-origin-association` file from a finite list of origins in order to support behaviors such as:
* URL handling where configuration needs to be written to the OS
* Deciding whether to display warning UI promptly instead of "popping" it into the visual layout after navigation is complete.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/875#issuecomment-2218368149
You are receiving this because you are subscribed to this thread.

Message ID: <w3ctag/design-reviews/issues/875/2218368149@github.com>