3 ms·
Local apps - I can install once and check signature. - I can store them in a backup for later forensics if they do something bad. - I can firewall the proces
by adriancr 6y ago
Local apps
- I can install once and check signature.
- I can store them in a backup for later forensics if they do something bad.
- I can firewall the process only to required services.
- I can disable outside network access for local process.
- I can analyze what it does before and after the fact.
- They can be scanned by a malware scanner / virus scanner.
Web apps:
- need network access to load (and probably at runtime?),I cant firewall off...
- can be refreshed by app provider - targetted to a specific user.
- Traffic is bundled together with chromium?
- I have no clue after the fact what happened. I cant sniff https traffic that app used to load its code...
Bad App owners should be considered as well... or well intentioned but hacked ones...
- ReactiveJelly 6y agoWe could bring those advantages to web apps, but there isn't money in it, so it won't happen yet.
- adriancr 6y agowouldn't that mean making them native apps, like something on top of electron? seems like reinventing the wheel.
- kevingadd 6y agoThe web platform has lots of tech now for fully offline web apps - the currently used term for this is a 'PWA' or Progressive Web Application. On Android and iOS in many cases there's a little option in your browser to install a website as a PWA, which puts it on your home screen and locally caches the assets. IIRC Twitter and Google Maps both support this for their website. Of course, writing a PWA is still a huge pain in the ass, and it doesn't give you those guarantees you mention from native apps - auditability, etc. But maybe it could get there, who knows...
- kbrosnan 6y agoThere are ways to write webapps that work offline. https://developer.mozilla.org/en-US/docs/Web/Progressive_web_apps/Offline_Service_workers https://developer.mozilla.org/en-US/docs/Web/Progressive_web... and https://developers.google.com/web/fundamentals/codelabs/offline https://developers.google.com/web/fundamentals/codelabs/offl... go over what is needed to accomplish this.