Post #2822750
2025-03-13 23:32 UTC
@torgo@mastodon.social never is a strong word
browsers are user agents and should do what the user tells them to. they should ship with defaults that suit most people
but, as it stands, every time browsers forcibly gate something behind their extremely conservative idea of a user action it makes my life, and my users' lives, worse
I'd be interested if you know of any real world malicious use of the current API given that it has been around for so long
Replies (1)
-
@torgo@mastodon.social 2025-03-14 09:47
@bovine3dom@masto.ai it's a good point. We have a design principle https://www.w3.org/TR/design-principles/#safe-to-browse in the @tag@w3c.social Web Platform Design Principles doc that says "it should be safe to visit a web page." That's to protect users' privacy & security against bad actors. So when we in TAG feed back on a proposed API, we are looking for its developers to have done some thinking about "abuse cases" and possible misuse.