3 ms·

I second that. Browser distinction between web apps and web pages is an awesome idea. I think the hard part is preventing users from learning to always click 'y

• wtallis 6y ago
  > I think the hard part is preventing users from learning to always click 'yes' to web-app level permissions just because the page instructs the browser to do so. I don't know the solution to this. The key requirement is that putting a site into app mode must be a tradeoff, not a mere expansion of capabilities/permissions. There has to be a disincentive to discourage non-app sites from unnecessarily requesting app-mode permissions. The most natural way to accomplish this would be restrictions that make it less practical and more expensive to exploit broader permissions to abuse users. Eg. if you want the browser to prompt me to give your site access to my location data, your site should have to surrender the ability to load trackers and ads from somebody else's servers—you should have to serve that up yourself from your own domain, or not at all. This would obviously break a lot about how things are commonly done on the current web, but most of what would be broken is the creepy stuff that we probably shouldn't be tolerating to begin with, like the monstrosity that reCAPTCHA has turned into under Google's stewardship.