3 ms·
Is this API needed? I understand the benefits, but web apps or Chrome extensions that _really_ need file access can already use the Native Messaging API and ask
by eastendguy 8y ago
Is this API needed? I understand the benefits, but web apps or Chrome extensions that _really_ need file access can already use the Native Messaging API and ask the user to install a native app, like here:
https://a9t9.com/kantu/x#fileaccess https://a9t9.com/kantu/x#fileaccess
The advantage of an explicit app installation is that users/companies that want to avoid such file access (and the many other things that native apps can do) can simply avoid/block app installations.
In the last two decades users have learned that "as long as it's inside the web browser, it's safe". If web apps themselves become too powerful this security approach breaks down.
- devwastaken 8y agoafaik native messaging requires platform dependent things such as registry entries on windows.
- kevingadd 8y agoThe native messaging api is buggy and limited and requires lots of platform specific code. It's not a good solution for any problem.
- Wowfunhappy 8y agoI don't know that native apps are the best resolution, but I absolutely agree with the last paragraph. There needs to be really clear user messaging around this type of access. The current state is, IMO, insufficient.
- Ajedi32 8y agoA native app would have full filesystem access. This API only grants access to files/directories you open in the web app.