9 ms·
New in Chrome 73
- Tepix 8y agoRegarding signed exchanges: "When the browser loads this Signed Exchange, it can safely show your URL in the address bar because the signature in the exchange indicates the content originally came from your origin." - the original website will not see these requests in its logs. Can visitors even tell that their browser is not accessing the server that shows up in the address bar? Their privacy is being violated. - when the original website deletes or modifies a resource, the old outdated version may still be distributed by a 3rd party
- skybrian 8y agoAnalytics could be done using JavaScript. (Or maybe some other way of triggering a request?) Alternately, depending on your perspective, it could improve privacy, by making it easier to create web apps that don't phone home and disclose your IP address. Perhaps distributed on a DVD? (I don't know if it supports full offline access.) Yes, reading stale content is possible. But this model of distribution is not new, it's how ordinary software distribution works. It's like downloading software from a mirror site, but the signature is automatically checked. Or consider what Cloudflare does and that you need to give them use of your private key to make it work. It's a trade-off.
- JetSpiegel 8y agoThis is just a crappy version of IPFS. NIH syndrome at its worse.
- nukeop 8y agoWe need less PWAs, not more. Many people are already confused enough when it comes to grasping the difference between websites and native applications. Another "standard" created to consolidate Google's position in the market.
- chippy 8y agoI'm also confused about how privacy enhancing browser extensions work within a PWA. I've yet to get a full answer on this (it seems as if no one really knows) but it seems to me as if a PWA is more friendly to trackers and less friendly to users of the browser.
- pjmlp 8y agoIf you want to keep trackers out, the only real option is not to use any Web based app. There are plenty of tricks to work around ad blockers.
- kinlan 8y agoI work on the project - PWA's on desktop are essentially just tabs without the Chrome at the moment, so it all goes through the same plumbing right now. It's not more or less friendly to trackers, if you have an extension the extension should still run in the same context.
- chippy 8y agoI appreciate the explanation, thanks.
- WhatIsDukkha 8y agoIs that an implementation detail or in the design spec?
- MatekCopatek 8y agoI'm not familiar with the details of implementing a PWA and how much it's tied to Chrome specifics (that would certainly be bad), but I generally disagree with you. I feel like way too many companies are making native apps just for the sake of users being able to install them and have that icon on the home screen. Most of the time the app doesn't require any native-only functionalities, it could function as web app just fine, so it's a bunch of unnecessary overhead. And mobile platform owners love this as the growing ecosystem means more lock-in. PWAs seem to be a nice middle ground solution to this problem IMHO.
- hestefisk 8y agoWe need to drop Chrome and start using Firefox. I just switched to FF Nightly and it is really fast with GPU acceleration. Please download today!
- fjsjejejdj 8y agoStop
- ddon 8y agoFirefox team needs to wake up and add support for PWA.
- Jonnax 8y agoI thought PWA was just service workers and implementing routing on the web app level. What's missing in Firefox?
- rosege 8y agoI think the best browser definitely fluctuates over time. I started out with Mozilla c1995. Then have shifted through most of them at various points in time when I've become unhappy with my current choice. I went back to Firefox when they released their Quantum version and have been really happy with it. Haven't used Chrome much since then. But I'm always open to other browsers should something change in the future.
- fetbaffe 8y ago
- dplesca 8y agoSomehow, the update to Chrome 73 managed to ruin Chrome Sync on my work Mac. I have to "unpause" sync every time I run Chrome and I'm logged out of every account after closing the app, although I do allow cookies and don't clear them on close. My passwords don't autofill anymore, either. What's the point of buying into the whole Chrome Sync thing if it randomly dies for no apparent reason?
- pibefision 8y agoHappened to me too.
- dplesca 8y agoIt seems to be a wider problem by looking at the messages from https://support.google.com/chrome/threads?hl=en&thread_filter=(category:chrome_sync) https://support.google.com/chrome/threads?hl=en&thread_filte...
- deleted 8y ago[deleted]
- felix1996 8y agoDesktop PWA update looks promising and considering the last update, allowed many to upload PWAs on Google Play store. I feel the promises are finally coming true.
- deleted 8y ago[deleted]
- felix1996 8y agoHave written down my experience with Desktop PWA update: https://news.ycombinator.com/item?id=19377170 https://news.ycombinator.com/item?id=19377170
- Rowern 8y agoYou should probably just say its a tutorial on how to install a PWA (i.e. how to click on the install button).
- nes350 8y agoSXG[0] looks promising - allows signing (and subsequently caching externally) whole HTTP exchanges. This may be useful for improving security, especially of CDNs. Binary Transparency seems to be one of the use cases mentioned in the spec[1] - perhaps someday this would be used for an unified scheme for signing application packages/updates, without reinventing the wheel every time. [0]: https://developers.google.com/web/updates/2019/03/nic73#sgx https://developers.google.com/web/updates/2019/03/nic73#sgx [1]: https://wicg.github.io/webpackage/draft-yasskin-http-origin-signed-responses.html#rfc.appendix.A.4 https://wicg.github.io/webpackage/draft-yasskin-http-origin-...
- Leace 8y agoSXG is primarily designed for AMP so that the browser can display the origin in the address bar while the content is being served from Google. Currently only one CA provides paid certificates with a special extension so that the cert can be used to sign SXG files [0]. [0]: https://www.digicert.com/account/ietf/http-signed-exchange.php https://www.digicert.com/account/ietf/http-signed-exchange.p... As for binary transparency it's not enough to stamp the certificate (that's what CT logs do). The artifact would have to be stamped and published in a widely accessible source. Actually Binary Transparency doc published by Mozilla [1] creates a new regular certificate for new published binary thus utilizing CT infrastructure as it is today. [1]: https://wiki.mozilla.org/Security/Binary_Transparency https://wiki.mozilla.org/Security/Binary_Transparency If we're at Mozilla, it's also interesting to see what's their position on SXG [2]. There is only one spec there with that status there. [2]: https://mozilla.github.io/standards-positions/ https://mozilla.github.io/standards-positions/
- Ajedi32 8y agoFWIW, Mozilla's current objections to the standard don't really make sense. See: https://github.com/mozilla/standards-positions/issues/29#issuecomment-459547918 https://github.com/mozilla/standards-positions/issues/29#iss... It seems the real issue at the moment is that it just isn't a high priority for them.
- 8y ago
- kowdermeister 8y agoThe DevTools update is amazing: https://www.youtube.com/watch?v=uddZX9ZK6wY https://www.youtube.com/watch?v=uddZX9ZK6wY Break point like console logging is a neat idea.
- rimliu 8y agoXcode has similar functionality. It is the actual breakpoint, but you can just log the message (or make the computer to say it) and continue execution.
- masklinn 8y ago> Xcode has similar functionality. And safari's own devtools inherited it years ago. edit: looked it up, was introduced in Safari 8 (2014): https://news.ycombinator.com/item?id=8585122 https://news.ycombinator.com/item?id=8585122
- Lord_Zero 8y agoThanks for this! Extracting only used CSS was really helpful. I really needed this a few weeks ago and didn't even know it.
- s_y_n_t_a_x 8y agoThis was already technically possible, you could add a conditional breakpoint with a console log in the input and it wouldn't "break" because console.log returns undefined (false).
- ryenus 8y agoFinally: * Dark mode is now supported on Mac, and Windows support is on the way.
- adamlett 8y agoI find it a little bit amazing that we now live in time where features in mainstream applications ship for the Mac before they ship for Windows.
- extra88 8y agoYou mean like how IE5 for Mac in 2000 had a variety of features IE for Windows lacked, including much superior CSS support?
- duskwuff 8y agoThere was so much more than that, too... Mac IE5 had full support for transparent PNGs, a download manager, an auction manager (!), and a bunch of different color themes to match Apple's product line. It was easily better than even MSIE6, and it's a shame that Microsoft essentially abandoned the product after release, along with the Tasman rendering engine it used.
- buran77 8y agoIt's because of MacOS's dark mode is a little more established the Win10's. It makes sense to release the feature there first.
- davidcollantes 8y agoHow is dark more enabled, do you know? Is it automatically enabled while under Mojave dark mode, or? Thanks!
- e1g 8y agoYes - my Chrome starts in dark mode when Mojave is in dark mode.
- theon144 8y agoSo, are these "Constructable Stylesheets" a non-standard Chrome-only web feature that Google designed and implemented, or what's going on here?
- kowdermeister 8y agoIt is: https://wicg.github.io/construct-stylesheets/ https://wicg.github.io/construct-stylesheets/ They added two new methods to solve the FOUC (flash of unstyled content) problem. It can easily become part of the standard if the feedback is positive.
- novaRom 8y ago1) Uninstall Chrome 2) Download and install Firefox Nightly 3) Switch default Search engine to DuckDuckGo 4) Install uBlockOrigin 5) Enjoy web and youtube without Ads !
- snaky 8y agoAnd one more thing - 2, 3 and most exciting 4 works on Android too.
- novaRom 8y agoBut not 5)? I think if you watch youtube in FF Nightly with uBlock installed you should not see any ads?
- snaky 8y agouBlock Origin is not ideal. But there's NewPipe at F-Droid for YouTube, it's also without the proprietary YouTube-API or any of Google's (proprietary) play-services. https://f-droid.org/en/packages/org.schabi.newpipe/ https://f-droid.org/en/packages/org.schabi.newpipe/
- borumpilot 8y agoDid you forget 1.5) Start IE
- reissbaker 8y agoThis is a huge release. Supporting PWA installation cross-platform provides a viable alternative to Electron-style bloat for many apps, and shipping SGX is useful for anyone who dislikes the AMP UX. Kudos to the Chrome team.
- devwastaken 8y agoOnly for the 'apps' which are just websites but use electron because they want an installer. If you need native access, pwa is not it and won't be.
- Lord_Zero 8y agoPWAs are getting more and more native access every day. File System access is a planned feature.
- c0l0 8y agoOh $deity. If this is for real, we're all doomed.
- dman 8y agoFor the category of apps I work on, this will finally make the browser a real alternative. (I need access to fast local IO).
- devwastaken 8y agosandboxed file system access. People use electron because they need things like registry keys, reading/writing files from anywhere on the system, interaction with specific kernal functions, and tons of things browsers cannot give anywhere the same flexibility to without becoming a major vector for malware. Not to mention a lot of electron apps, like Spotify, use their own c++ libs, like Spotify json, because browser perf sucks. You cannot sandbox and have native access, full stop.
- ymolodtsov 8y ago
- gsich 8y agoHave they reverted the horrible UI?
- Bjartr 8y agoCould you at least go into a little detail about what you think is horrible about the ui? That way you're contributing to the discussion.
- gsich 8y agoThe new design is space wasting. Check the URL bar for example, you type something and you get suggestions. The distance between each entry is huge. I don't have a touch interface on my desktop. It should be configurable. It was, until they removed the flags. Tabs: with the old edgy style you saw "more" and was easier to click. This might be a personal choice though. Account: Previously (on Windows) your Google account was displayed next to the minimize/maximize/close button. Now it's next to the icons for addons. Wasting space. Difference between Linux and Windows: On Linux (Fedora, Ubuntu) you can use the scrollwheel to cycle through tabs when hovering over them. Doesn't work in Windows.
- miller_joe 8y agoIs there a list of popular apps that are available as PWAs yet? Or info on if/when major apps will be available as PWAs (slack, spotify, etc)?
- Gudahtt 8y agoThis update includes everything in V8 v7.3 as well: https://v8.dev/blog/v8-release-73 https://v8.dev/blog/v8-release-73
- deleted 8y ago[deleted]
- felixfbecker 8y agoSo Chrome supports dark theme, and PWAs can now be installed, but the PWA window does not support dark theme. Ironic. Two features developed in isolation?
- mikewhy 8y agoPWAs can be themed by the app.
- ymolodtsov 8y agoWhat are they supposed to do with them, repaint Twitter and the others? Especially since these apps basically have zero system elements other than 3 buttons (to clarify I'm talking about MacOS).
- felixfbecker 8y agoMake the huge title bar dark, just like in normal Chrome? You can already select dark theme inside Twitter, but it's irritating with the light title bar. With `prefers-color-scheme` soon websites will be able to react to system theme too.
- eatbitseveryday 8y agoIntel SGX[0] is a specific technology supported by the CPU for encrypting application memory. Is the acronym used differently in the context with Chrome? [0] https://software.intel.com/en-us/sgx https://software.intel.com/en-us/sgx
- gruez 8y agono, but to be fair it's pretty confusing. intel sgx: software guard extensions chrome sgx: Signed HTTP(????) Exchanges
- remir 8y agoI briefly looked around and it seems like desktop PWA are not yet supported by Firefox. At least I haven't found a way to add an app to the desktop like we can do in Chrome. A bit disappointing.
- mikewhy 8y agoOn macOS at least, opening a PWA .app also launches Chrome, and quitting Chrome also quits any PWAs you have open. That's not a stellar experience.
- aasasd 8y agoExactly like it was with Chrome “applications“ four or five years ago.
- DanHulton 8y agoHas anyone else noticed a reduction in New Tab icons? I used to have 10 defined, but now it will only show 8 of them. OSX 10.14.3, Chrome 73.0.3683.75. It also seems to sometimes not want to display the text for the New Tab icons in white and picks a nearly-imperceptible slightly-darker grey.