3 ms·
> For example, that first visit which installs the service worker can already deliver bad code. Yes, but that is also the case when you install a desktop app.
by twiss 9y ago
> For example, that first visit which installs the service worker can already deliver bad code.
Yes, but that is also the case when you install a desktop app. That's why Airborn OS is open source, so that you can inspect the code.
- EGreg 9y agoAgreed but with a desktop app, the author can sign it and the OS verifies that signature. Sadly the Web does no such thing with the top level document.
- twiss 9y agoYes, that's true, but the author (or intermediary-who-delivers-the-binary) can also.. not sign it (deliver an unsigned version). Often, you don't have many other options than to trust the binary the website is serving you.
- jimktrains2 9y agoIt also happens far less frequently and I can do it at my leisure, or even just compile it on my own.