4 ms·
"Because a progressive web app has a more intimate user experience and because all network requests can be intercepted through service workers, it is imperative
by thinkMOAR 9y ago
"Because a progressive web app has a more intimate user experience and because all network requests can be intercepted through service workers, it is imperative that the app be hosted over HTTPS to prevent man-in-the-middle attacks."
Nicely written and layed out, though I would suggest to add a point that describes not including 3rd party hosted resources to prevent leaking user activity at third parties. Other way described, host all resources on your own site/url.
- seanwilson 9y agoIsn't HTTPS a hard requirement? https://developer.mozilla.org/en-US/docs/Web/API/Service_Worker_API/Using_Service_Workers https://developer.mozilla.org/en-US/docs/Web/API/Service_Wor... > You’ll also need to serve your code via HTTPS — Service workers are restricted to running across HTTPS for security reasons."
- thinkMOAR 9y agoSure, and using https is a good thing, but that doesn't stop google etc from logging my request/ip requesting those font at that time etc for whatever purposes. I don't really want those parties to be aware of me using a particular service, or being online at a specific time etc. Certainly not just for a font.