3 ms·
On iOS you get asked the first time an app tries to show you notifications and it's very easy to disable them after the fact too. Since PWAs are just apps you a
by Etheryte 4y ago
On iOS you get asked the first time an app tries to show you notifications and it's very easy to disable them after the fact too. Since PWAs are just apps you add to your homescreen nothing will change in this regard.
As an aside, how would a notification steal your info?
- arepublicadoceu 4y ago> As an aside, how would a notification steal your info? How about: “Hey dear user you won {amount} of money please click here and fill this totally safe form” This was me thinking for a solid 3 seconds, imagine if someone put some effort into the message.
- Etheryte 4y agoThis is not a threat model that's unique to PWAs though, nor in any way enabled by what's seen here. Installing a PWA is practically equivalent to installing an app and a malicious app or an app that had their OneSignal or similar credentials compromised could do the exact same thing.
- diebeforei485 4y agoApple can disable push notifications from a compromised app. It's unclear if they can do it for a compromised website, which was my question above.