3 ms·
The problem with these supposedly local, private web apps on other people’s domains is that they can start stealing your data any time the page is refreshed. Th
by oefrha 2y ago
The problem with these supposedly local, private web apps on other people’s domains is that they can start stealing your data any time the page is refreshed. The author can turn malicious (or was malicious to begin with), they can sell the app or let the domain expire, or they can be hacked. The only way to prevent that is to firewall/null route that domain entirely after initial load and audit, and then you can’t ever refresh the page.
The web platform simply doesn’t allow you to verify the checksum of an app and reject all further requests.
- doix 2y ago> The only way to prevent that is to firewall/null route that domain entirely after initial load and audit, and then you can’t ever refresh the page. I mean, at that point, why not just grab the files are host them yourself?
- oefrha 2y agoWell that’s exactly the point. Having a directory of these static files you can self host with eyeballs on updates would be great.
- oefrha 2y agoA late edit for a brain fart: “and then you can’t ever refresh the page” should be removed since it can be served from service worker cache. You can’t refresh the page while allowing a connection to the server.