3 ms·
That's blocked on https://github.com/w3c/ServiceWorker/issues/1208 https://github.com/w3c/ServiceWorker/issues/1208. However, there's also an alternative option
by twiss 9y ago
That's blocked on https://github.com/w3c/ServiceWorker/issues/1208 https://github.com/w3c/ServiceWorker/issues/1208. However, there's also an alternative option to make updating the Service Worker unnecessary, by making a "stub" Service Worker which downloads, validates and executes the rest of the SW code. Then, whenever the "stub" Service Worker updates, it's likely a breach and we can warn the user accordingly.
- jimktrains2 9y agoCode you can't update is normally an expensive liability in the case that it's not perfect. Also, then the stub service worker is subject to the same problem it's attempting to solve. I'm still left in a situation where I need to trust you don't mess up. You even say it yourself: > (Of course, we can't prevent the update, but we can at least try to convince the user to close the web app before it steals their private keys.) At that point, the game is up.