Discouraging the use of permission prompts

Hello webappsec,

Within Chrome, we are working to reduce the number of permission prompts
that get shown to users. One part of that effort is discouraging folks
creating new APIs from using a prompt to make it safe™. Instead, we
enumerate a list of alternatives that are not prompts and have proven
useful for various capabilities. We have summarized our ideas in this
document
<https://chromium.googlesource.com/chromium/src/+/refs/heads/main/docs/security/no-prompts-please.md>
..

We would love to get your feedback on what we have, with the aim of
creating a group note for wider circulation. We’ll also put this topic on
the agenda for the July webappsec meeting.

Thanks for any input in advance!

Cheers,

Marian, Serena, Yuan, and Balazs