Re: [w3ctag/design-reviews] Question: Review manifest-first Web Install API (Issue #1245)

christianliebel left a comment (w3ctag/design-reviews#1245)

Hi @LiaHiscock, thanks for the detailed update and for continuing to work on this proposal. During our last F2F, the TAG agreed to write a Finding on web installs, and web developers expressed interest in programmatic install APIs. We are **declining** this review, as our position hasn’t changed from the previous iterations of this proposal (https://github.com/w3ctag/design-reviews/issues/888, https://github.com/w3ctag/design-reviews/issues/946, https://github.com/w3ctag/design-reviews/issues/1051).

In general, we remain satisfied with the same-origin install use case (https://github.com/w3ctag/design-reviews/issues/888#issuecomment-2316801231, https://github.com/w3ctag/design-reviews/issues/1051#issuecomment-2943539903), but would like to see that rolled out first before tackling cross-origin installs. To inform future iterations, we believe there are two kinds of cross-origin installs: general stores that may install any origin, and stores for a single organisation’s apps (e.g., Adobe Creative Suite or Microsoft Office) that only install related origins. The latter is considerably safer, but needs a way to identify which origins are related.

The proposal has now changed from addressing the document to addressing the manifest URL, while the requirement for a manifest ID remains. While we understand the reasoning behind the “manifest ID footgun,” we want to repeat that not all engines require a manifest or an ID for installation (i.e., adding a site to the taskbar/dock or home screen).

It would be unfortunate if we claimed prominent names like `navigator.install()` and `<install>` for an API shape that bakes in a single engine’s install model, should other engines decide to adopt them in the future. It would be great if the design accounted for user-agent-specific install criteria, such as not requiring a manifest at all, or not supporting cross-origin installs.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/1245#issuecomment-6017956531
You are receiving this because you are subscribed to this thread.

Message ID: <w3ctag/design-reviews/issues/1245/6017956531@github.com>

Received on Tuesday, 6 October 2026 14:04:25 UTC