Yeah, it should require user interaction to trigger the prompt. In fact, some of the better websites do this already. This should be the same for nearly everyt

Yeah, it should require user interaction to trigger the prompt. In fact, some of the better websites do this already. This should be the same for nearly everything, like: - playing video/audio automatically - location access - direct GPU access In fact, it would probably make sense to include all scripting (JavaScript and web assembly). To make this suck less, the website should be able to request multiple permissions at once, with each permission able to be granted individually and websites able to put a short reason why each is being requested. Those permissions should show up in an easy to use menu for each site, like the TLS info button. Perhaps that same menu is the only way to enable/disable, so no popups, and all permissions are disabled by default.