Live data from Hacker News

Private client-side-only PWAs are hard, but now Apple made them impossible

andregarzia.com

71–80 of 927 posts

Re: Private client-side-only PWAs are hard, but now Apple made them impossible

#71
post #22

Safari already was lagging behind Chrome, Chrome forks and Firefox in a lot of feature adoption. This will only make it more of a "new Internet Explorer", a browser that sites recommend you NOT to use.

Good luck with telling people not to use Safari (or more accurately WebKit) on iOS....

You’re right. Tell people not to use iOS

https://www.forbes.com/sites/gordonkelly/2020/03/14/apple-io...

You Apple users will put up with anything!

(disclaimer: iOS user)

Re: Private client-side-only PWAs are hard, but now Apple made them impossible

#72
The article doesn't exactly cut to the chase. Here it is:

> "...But deleting all local storage (including Indexed DB, etc.) after 7 days..."

From the Apple announcement:

> Now ITP [Intelligent Tracking Prevention] has aligned the remaining script-writable storage forms with the existing client-side cookie restriction, deleting all of a website’s script-writable storage after seven days of Safari use without user interaction on the site. ...

https://webkit.org/blog/10218/full-third-party-cookie-blocki...

Re: Private client-side-only PWAs are hard, but now Apple made them impossible

#73
post #4

Better title: Apple restricts tracking by limiting browser storage, which hurts my particular app. Browsers need to be severely limited due to them running arbitrary code from the web. Doesn't matter if it's an offline web app. If you want more access, make a native app (with or without web technologies).

But browsers are severely sandboxed already. What the article is talking about is: > deleting all local storage (including Indexed DB, etc.) after 7 days which I can see how it might help privacy (since you could be tracked via local storage too) but also how it might break any potential web app that might need data to last more than 7 days. > If you want more access, make a native app But then, everybody will compla…

7 days after Safari use without user interaction on the site.

Re: Private client-side-only PWAs are hard, but now Apple made them impossible

#75

webkit is open source - can't this be changed (be it by fork, or a commit proposal?)

Sure, so maybe WebKitGTK will (if this applies to that version). But why would Apple choose to include this fork over their own version in their OSes? If they don't how do you plan on using it with any Apple OS?

Re: Private client-side-only PWAs are hard, but now Apple made them impossible

#76
post #56

Earlier quoted context omitted.

User not coming to website 7 days can't be invalid use-case. Losing important data simply because someone went on vacation is unacceptable.

So store this data on the server.

But wouldn't that make it have less privacy? Now my webapp cannot be used offline and anonymously, user has to be logged in and tracked

Re: Private client-side-only PWAs are hard, but now Apple made them impossible

#77
post #17

Earlier quoted context omitted.

Yea, we actually don't use safari at all in our app. So this might not have an effect but it's pretty vague.

If you don't use Safari you can patch webkit to change the policy, right? Change 7 to 10000000

Apple only allows apps to use their webkit implementation.

Re: Private client-side-only PWAs are hard, but now Apple made them impossible

#78
I'm confused, or seeing confusion, over some things in the comments here. "We don't use Safari in our app..." We're talking web apps: you know, web sites with functionality. You don't exactly have control over which browser your users use. And in iOS, everyone is using 'Safari' even if it's Firefox or Chrome wrapped around the rendering control. This means you have to assume that the policy affects any visitor from any web browser on iOS. Technically, the other browser vendors can siphon the data into other storage to their users' benefit, but I don't know how likely they are to do that, nor whether Apple would approve them with such changes.

Do you mean that you deploy a 'native' app that's really just a wrapper around a web view that would also be just Safari? Same policy applies, but now, you have the option, in native code, to siphon off data and put it into Real Storage.

Re: Private client-side-only PWAs are hard, but now Apple made them impossible

#79

Earlier quoted context omitted.

I have many useful files in my computer, which I don't want to be deleted. You are saying, that it is ok, if the OS deletes all files in my computer from time to time. A local storage is the only way webapps can store any data in your computer (other than asking you to manually load / save some configuration file). Not all webapps can afford cloud storage for all user.

I am not saying that it is OK to delete all your files. I am saying it has always been like that in the case of a browser's local storage. As I said, that use case was out of the window long before. From the start, as far as I know. No browser has ever given you any definite promise on whether your local storage data will be kept. That's also true for IndexedDB. So you need a mechanism to restore that data, be it clo…

I'd love for browsers to have an opt-in mechanism to preserve that data (also snapshot/restore/import/export it).

Re: Private client-side-only PWAs are hard, but now Apple made them impossible

#80
post #4

Better title: Apple restricts tracking by limiting browser storage, which hurts my particular app. Browsers need to be severely limited due to them running arbitrary code from the web. Doesn't matter if it's an offline web app. If you want more access, make a native app (with or without web technologies).

> If you want more access, make a native app (with or without web technologies).

How's installing a native app better for a random user privacy or security wise, exactly?

Post reply on HN