3 ms·
> At least browsers generally have a better permission model than desktop apps The flaw with that is desktop apps have the ultimate permission model, you choos
by donatj 11y ago
> At least browsers generally have a better permission model than desktop apps
The flaw with that is desktop apps have the ultimate permission model, you choose to have them, and don't just stumble across them.
- cm3 11y agoAnd your local apps don't self-modify the code all the time, whereas that's exactly what the dynamic browser environment with 3rd-party scripting is.
- nsgi 11y agoHow are users supposed to know whether they can trust a desktop app with near-unlimited access to their computer? Generally they don't, but blindly install it anyway because it seems to do something they need.
- erikpukinskis 11y agoYes, that's called "opt in" and it's the same security model this standard is proposing.