<br><br><div class="gmail_quote">On Thu, Jul 30, 2009 at 10:18 AM, Michael Davidson <span dir="ltr"><<a href="mailto:mpd@google.com">mpd@google.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">On Tue, Jul 28, 2009 at 10:58 PM, Maciej Stachowiak<<a href="mailto:mjs@apple.com">mjs@apple.com</a>> wrote:<br>
><br>
> Here's some security risks I've thought about, for persistent workers and<br>
> persistent background pages:<br>
><br>
</div>> <great list of risks><br>
<br>
Thanks for the list, Maciej. However, Firefox extensions today have<br>
all of the same problems. Do you consider the permission UI in Firefox<br>
insufficient? Given Safari's extension model, I'm going to guess the<br>
answer is yes. The fact that FF has extensions, however, at least<br>
shows that one browser vendor believes that sufficient permission UI<br>
exists.</blockquote><div><br></div><div>Maciej said this at the end of original email.</div><div><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;">"<span class="Apple-style-span" style="font-family: arial, sans-serif; font-size: 13px; border-collapse: collapse; ">I do think offering a feature like this in the context of an application or extension style install experience might be acceptable - specifically an experience that is explicitly initiated by the user with multiple affirmative steps. But web features are not usually designed around such an expectation, usually this is the hallmark of a proprietary platform, at times also including central vetting and revocation capabilities."</span></blockquote>
<span class="Apple-style-span" style="font-family: arial, sans-serif; font-size: 13px; border-collapse: collapse; "></span></div><div><span class="Apple-style-span" style="font-family: arial, sans-serif; font-size: 13px; border-collapse: collapse; "><span class="Apple-style-span" style="border-collapse: separate; font-family: arial; font-size: small; "> </span></span></div>
<div><font class="Apple-style-span" face="arial, sans-serif">Does that answer your question?</font></div><div><font class="Apple-style-span" face="arial, sans-serif"><br></font></div><div><br></div></div>