On Sat, Apr 15, 2017 at 6:09 AM, Philipp Serafin wrote:
> If I see this correctly, we're currently talking about two different
> use-cases for file/directory access:
>
> 1) …
>
> 2) Loading (parts of) the app itself from a local filesystem, possibly
> without any network access being available at all (the CD rom example).
>
> Maybe the security would be easier to handle if dealt with both use-cases
> separately. I think both use-cases have different requirements,
> non-requirements and "prior art":
>
> 1) …
>
> 2) sounds like an extension of offline apps to me. Maybe this could be
> solved by defining some kind of package format for service workers and
> cached resources, so service workers can be installed without any network
> access.
>
FWIW, we're working on such a packaging format in
https://github.com/dimich-g/webpackage. It's still early, and we haven't
yet described how to do things like check certificate and package
revocation, but it's got the overall direction we're thinking about.
Jeffrey