[w3ctag/design-reviews] Other Spec Review: Service Worker Capability Delegation for Pop-ups (Issue #1295)

dmurph created an issue (w3ctag/design-reviews#1295)

### Specification

https://htmlpreview.github.io/?https://github.com/dmurph/capability-delegation/blob/popup-delegation-spec/spec.html

### Explainer

https://github.com/WICG/capability-delegation/blob/main/explainers/popup-delegation.md

### Links

- Explainer: https://github.com/WICG/capability-delegation/blob/main/explainers/popup-delegation.md
- Specification:
  - Rendered Draft (with Service Worker `"popup"` delegation): https://raw.githack.com/dmurph/capability-delegation/popup-delegation-spec/spec.html ([HTML Preview](https://htmlpreview.github.io/?https://github.com/dmurph/capability-delegation/blob/popup-delegation-spec/spec.html), [GitHub Pages](https://dmurph.github.io/capability-delegation/spec.html))
  - Spec Source & Diff (`spec.bs`): https://github.com/WICG/capability-delegation/compare/main...dmurph:capability-delegation:popup-delegation-spec
  - Base WICG Specification: https://wicg.github.io/capability-delegation/spec.html

---

- Previous early design review, if any:
  - Capability Delegation (base framework): https://github.com/w3ctag/design-reviews/issues/655 (`Resolution: satisfied`)
  - Earlier discussion on delegation of user activation: https://github.com/w3ctag/design-reviews/issues/347
- An introduction to the feature, aimed at unfamiliar audiences: https://github.com/WICG/capability-delegation/blob/main/explainers/popup-delegation.md#introduction
- A description of the problems that end-users were facing before this proposal: https://github.com/WICG/capability-delegation/blob/main/explainers/popup-delegation.md#motivating-user-scenario-webmail-notification--state-sharing-preview
- Alternatives considered: https://github.com/WICG/capability-delegation/blob/main/explainers/popup-delegation.md#alternatives-considered
- Examples of how to use the proposal to solve the end-users' problems: https://github.com/WICG/capability-delegation/blob/main/explainers/popup-delegation.md#developer-usage-example
- What do the end-users experience with this proposal: https://github.com/WICG/capability-delegation/blob/main/explainers/popup-delegation.md#key-execution-scenarios
- User research you did to validate the problem and/or design, if any:
  - Webmail and productivity developers requested this feature ([WICG/capability-delegation#42](https://github.com/WICG/capability-delegation/issues/42)). When a user clicks a desktop notification, an open client tab must open a popup window (`window.open()`). This popup window shares memory with the client tab. Without this feature, `Clients.openWindow()` forces a full reload of a new tab.
  - Interactive Demo / Sample Site: https://googlechrome.github.io/samples/service-worker/capability-delegation-popup/index.html
- Web Platform Tests:
  - https://github.com/web-platform-tests/wpt/blob/master/html/capability-delegation/frame-capability-delegation-popup-blocked.tentative.html
  - Chromium Service Worker tests (for future upload to WPT): https://source.chromium.org/chromium/chromium/src/+/main:third_party/blink/web_tests/http/tests/serviceworker/clients-capability-delegation.html
- Security and Privacy self-review:
  - Service Worker Popup Capability Delegation Questionnaire: https://github.com/WICG/capability-delegation/blob/main/explainers/popup-delegation-security-privacy-questionnaire.md
  - Popup delegation security & privacy considerations: https://github.com/WICG/capability-delegation/blob/main/explainers/popup-delegation.md#security--privacy-considerations
  - Overall Capability Delegation Security & Privacy Questionnaire (from TAG #655): https://github.com/WICG/capability-delegation/blob/main/security_and_privacy_questionnaire.md

### The specification

- [x] Follows the [Web Platform Design Principles](https://www.w3.org/TR/design-principles/).
- [x] Includes Security and Privacy Considerations sections based on answers to the [Security/Privacy Questionnaire](https://www.w3.org/TR/security-privacy-questionnaire/).

### Where and by whom is the work is being done?

- GitHub repo: https://github.com/WICG/capability-delegation
- Primary contacts:
  - Daniel Murphy (@dmurph), Google, Author
  - Mustaq Ahmed (@mustaqahmed), Google, WICG Capability Delegation Editor
- Organization/project driving the specification: Google (Chromium)
- This work is being funded by: Google
- Primary standards group developing this feature:
  - WICG ([Capability Delegation](https://github.com/WICG/capability-delegation/issues/42)) develops this proposal. The target standards groups are W3C WebApps WG ([Service Workers](https://w3c.github.io/ServiceWorker/)) and WHATWG ([Notifications](https://notifications.spec.whatwg.org/) and [HTML](https://html.spec.whatwg.org/)).
- Incubation and standards-track status: WICG hosts this proposal. We will move the normative changes into W3C Service Workers, WHATWG Notifications, and WHATWG HTML.

### Feedback so far

- Multi-stakeholder support:
  - Chromium comments: Chrome 157 includes a Developer Trial behind the `#enable-experimental-web-platform-features` (`CapabilityDelegationPopup`) flag ([ChromeStatus](https://chromestatus.com/feature/5091965583622144), [crbug.com/542314185](https://crbug.com/542314185)).
  - Mozilla comments: We will request a standards position for this feature (prior Capability Delegation position: https://github.com/mozilla/standards-positions/issues/565).
  - WebKit comments: We will request a standards position for this feature (prior Capability Delegation position: https://github.com/WebKit/standards-positions/issues/178).
  - Developer comments: Webmail and communication developers requested parity between Service Worker notifications (`registration.showNotification()`) and document notifications (`new Notification()`). With this feature, an open client tab can call `window.open()` to open a popup window that shares state. https://github.com/WICG/capability-delegation/issues/42
- Major unresolved issues:
  - None.
- Status/issue trackers for implementations:
  - ChromeStatus: https://chromestatus.com/feature/5091965583622144
  - Chromium: https://crbug.com/542314185

### You should also know that...

_No response_

<!-- Content below this is maintained by @w3c-tag-bot -->
---

Track conversations at https://tag-github-bot.w3.org/gh/w3ctag/design-reviews/1295


-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/1295
You are receiving this because you are subscribed to this thread.

Message ID: <w3ctag/design-reviews/issues/1295@github.com>

Received on Tuesday, 27 October 2026 19:17:44 UTC