3 ms·
What has been done to ensure this can't be used to deliver malware, ads, spam, popups, etc? edit: more than "you have to opt-in" because we know people don't w
by feld 12y ago
What has been done to ensure this can't be used to deliver malware, ads, spam, popups, etc?
edit: more than "you have to opt-in" because we know people don't willfully install malware on their computers; the malware writers trick people into clicking on it or installing it
- millisecond 12y agoThere are several safe-guards, with more to come. The biggest one that's coming is being able to unsubscribe directly from the notification pop-up itself. This will shut down abusers very quickly. Beyond that: -All notifications traverse GCM. Which means you've signed a ToS with Google and they can shut you down (also a little scary). -Opt-in must happen on the main page, or have the main pages "consent". This prevents iframed ads registering people, for example. -9/10 pushes must display a user visible element (that will have the unsub feature) which prevents people from being malicious on the background Service Worker thread. More will come as this feature develops and it's seen how things play out in the wild.
- feld 12y agoThis is comforting. Thanks for the detail.