On 08/09/14 17:10, Daniel Veditz wrote:
It wouldn't be every API call, it'd be the first API call. Would it help to have an option to remember for the session (rather than per-document)? We have no guarantee that the foo.com you connect to tomorrow is the same foo.com you trusted today, especially if you're connecting to a new network (e.g. coffee shop, airport, hotel).
We do have a little leeway with how long a non-persistent grant lives, but I'm not sure that there are many cases where you wouldn't want to ask again.
For something like gUM, it's generally only the case that you want one anyway. So persisting grant until navigate doesn't help much, and there are definitely cases where it's harmful.
_______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform