I've put some comments on the github link and I agree with Mike (and other sec reviewers) that we might need a more detailed assessment of the API. The UI and mitigation are still in immature state and it's still unclear for us whether they are strong enough to prevent us from the vector of abuse. On Thursday, November 17, 2022 at 2:01:52 PM UTC+1 [email protected] wrote:
> Great, thanks, glad to hear it Peter! > > Rick > > On Thu, Nov 17, 2022 at 4:49 AM Peter Beverloo <[email protected]> wrote: > >> +Rayan Kanso and @Peter Conn >> >> We've been working with Gabriel & team on the proposal and are supportive >> of prototyping this functionality :) >> >> Thanks, >> Peter >> >> >> On Wed, Nov 16, 2022 at 8:20 PM Rick Byers <[email protected]> wrote: >> >>> Sounds cool to me from a web API perspective! >>> >>> You'll of course need approval from relevant code OWNERS to land patches >>> in this space, looks >>> <https://source.chromium.org/chromium/chromium/src/+/main:content/browser/notifications/OWNERS?q=file:notifications%20OWNERS&ss=chromium> >>> >>> like that's probably mainly +Peter Beverloo? Any concerns Peter? >>> >>> Thanks, >>> Rick >>> >>> On Tue, Nov 15, 2022 at 8:12 PM 'Gabriel Brito' via blink-dev < >>> [email protected]> wrote: >>> >>>> Contact emails >>>> >>>> [email protected], [email protected] >>>> >>>> Explainer >>>> >>>> >>>> https://github.com/MicrosoftEdge/MSEdgeExplainers/blob/main/Notifications/notifications_actions_customization.md >>>> >>>> Summary >>>> >>>> Extend the Notifications API to allow installed PWA's to send incoming >>>> call notifications - i.e., notifications with call-styled buttons and a >>>> ringtone. This extension will help VoIP web apps to create more engaging >>>> experiences by making it easier for users to easily recognize a calling >>>> notification and answer it. Besides that, this feature will help bridge >>>> the >>>> gap between native and web implementations of apps that have them both. >>>> >>>> >>>> Blink component >>>> >>>> UI>Notifications >>>> <https://bugs.chromium.org/p/chromium/issues/list?q=component:UI%3ENotifications> >>>> >>>> Motivation >>>> >>>> Incoming calls are events that require an immediate response. However, >>>> VoIP web applications that need to notify the user about an incoming call >>>> via the Notifications API, can only issue a regular notification that will >>>> show up in the action/notification center without any clear >>>> differentiation. Other options include each application implementing its >>>> own in-app notification system, which will only issue notifications inside >>>> the app window. This extension to the Notifications API standard for >>>> incoming call scenarios will allow web applications to send notifications >>>> with colored action buttons and a ringtone, which should have increased >>>> priority if allowed by the platform. >>>> >>>> Risks >>>> >>>> >>>> Interoperability and Compatibility >>>> >>>> >>>> *Gecko*: No signal >>>> >>>> *WebKit*: No signal >>>> >>>> *Web developers*: No signals >>>> >>>> *Other signals*: >>>> >>>> WebView application risks >>>> >>>> *Does this intent deprecate or change behavior of existing APIs, such >>>> that it has potentially high risk for Android WebView-based applications?* >>>> >>>> The Notification API is not supported in WebView. Therefore, there are >>>> no WebView risks. >>>> >>>> Is this feature fully tested by web-platform-tests >>>> <https://chromium.googlesource.com/chromium/src/+/main/docs/testing/web_platform_tests.md> >>>> ? >>>> >>>> No >>>> >>>> >>>> Requires code in //chrome? >>>> >>>> True >>>> >>>> Tracking bug >>>> >>>> https://bugs.chromium.org/p/chromium/issues/detail?id=1383570 >>>> >>>> Estimated milestones >>>> >>>> M111 >>>> >>>> >>>> Link to entry on the Chrome Platform Status >>>> >>>> https://chromestatus.com/feature/5110990717321216 >>>> >>>> This intent message was generated by Chrome Platform Status >>>> <https://chromestatus.com/>. >>>> >>>> >>>> >>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "blink-dev" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit >>>> https://groups.google.com/a/chromium.org/d/msgid/blink-dev/BY5PR00MB0824B2CEE0F7F1A4D4C65244D5079%40BY5PR00MB0824.namprd00.prod.outlook.com >>>> >>>> <https://groups.google.com/a/chromium.org/d/msgid/blink-dev/BY5PR00MB0824B2CEE0F7F1A4D4C65244D5079%40BY5PR00MB0824.namprd00.prod.outlook.com?utm_medium=email&utm_source=footer> >>>> . >>>> >>> -- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/4f8105fe-b67f-4e6f-bf76-c3aa54104842n%40chromium.org.
