Post #2822751
2025-03-14 09:47 UTC
@bovine3dom@masto.ai it's a good point. We have a design principle https://www.w3.org/TR/design-principles/#safe-to-browse in the @tag@w3c.social Web Platform Design Principles doc that says "it should be safe to visit a web page." That's to protect users' privacy & security against bad actors. So when we in TAG feed back on a proposed API, we are looking for its developers to have done some thinking about "abuse cases" and possible misuse.
Replies (1)
-
@bovine3dom@masto.ai 2025-03-16 10:49
@torgo@mastodon.social I think my issue with this kind of thinking is that it doesn't consider the tradeoffs between security (in a fairly narrow sense) versus innovation. If I can't think of a fantastic use case for some new API that will change the world, that says more about me than it does about the API. It's interesting that the example of ordering food is used - the web won the battle against applications on desktop but it is a rounding error on mobile. In part because of its conservatism, IMO @tag@w3c.social 1/2