Apple confirms it's breaking iPhone web apps in the EU on purpose

Post by throwaway49850 » Fri, Feb 16, 2024, 11:52 AM UTC

throwaway49849 wrote: post #601

throwaway49850 wrote: post #549

Earlier quoted context omitted.

That has never been the social contract. I hate this outcome as much as the next guy and I'm sure Apple could have continued to support PWAs if they wanted to. And they should have done it. That being said, I'm tired of the argument that OSS maintainers are being owed anything (beyond gratitude). They publish their software under licences they themselves choose. As long as someone follows the license, they are good.…

I don't mean to imply that the OSS maintainers are owed anything, because I don't believe that. There is still a social contract without anyone being owed anything. You haven't really given an example of why you don't think it exists. Also, to what do I owe the honor of you creating a username based on mine, specifically to reply to me?

Post by piyush_soni » Fri, Feb 16, 2024, 12:03 PM UTC

Post by beeboobaa » Fri, Feb 16, 2024, 12:05 PM UTC

LeoPanthera wrote: post #7

Since the article doesn't actually repeat what Apple has said, here's what Apple says: == Begin quote == The iOS system has traditionally provided support for Home Screen web apps by building directly on WebKit and its security architecture. That integration means Home Screen web apps are managed to align with the security and privacy model for native apps on iOS, including isolation of storage and enforcement of sys…

Post by beeboobaa » Fri, Feb 16, 2024, 12:07 PM UTC

zer00eyz wrote: post #22

LeoPanthera wrote: post #7

Since the article doesn't actually repeat what Apple has said, here's what Apple says: == Begin quote == The iOS system has traditionally provided support for Home Screen web apps by building directly on WebKit and its security architecture. That integration means Home Screen web apps are managed to align with the security and privacy model for native apps on iOS, including isolation of storage and enforcement of sys…

Without this type of isolation and enforcement, malicious... camera, microphone or location ... Browsers ... 30 some million lines of code in chromium browsers. Thats bigger than the linux kernel. The HN crowed might not LIKE apples response but they have a very defensible position. Edit: Its not like we haven't seen this play out on the desktop recently: https://www.theverge.com/24054329/microsoft-edge-automatic-c..…

Post by beeboobaa » Fri, Feb 16, 2024, 12:08 PM UTC

wokwokwok wrote: post #315

arghwhat wrote: post #213

Earlier quoted context omitted.

It really doesn't make sense. By that logic, I shouldn't be allowed to load web pages because it's impossible to secure a browser. PWA's only need a few extra integration privileges like badge- and window control, rest is just a web as usual. What you link is a case of one app (edge) reading the data of another app (chrome), which is entirely unrelated to PWAs.

> By that logic, I shouldn't be allowed to load web pages because it's impossible to secure a browser. Indeeed, and 'whatever browser engine you picked here' is responsible for correctly implementing these additional security features. That's the argument; if you write an app that lets you run other apps inside it how do we make sure your app does security correctly? When you look at it from that perspective, you can…