#379: Content Indexing

Visit on Github.

Opened May 20, 2019

Góðan dag TAG！

I'm requesting a TAG review of:

https://github.com/rknoll/content-index/blob/master/SECURITY_AND_PRIVACY.md

You should also know that... There is no spec written yet as this API is still in design phase. We're happy for all feedback!

We'd prefer the TAG provide feedback as (please select one):

  • open issues in our GitHub repo for each point of feedback
  • open a single issue in our GitHub repo for the entire review
  • leave review feedback as a comment in this issue and @-notify [github usernames]

Discussions

Comment by @hober May 22, 2019 (See Github)

Hi,

Thanks for bringing this review to us. We're trying to require all requests for review to have considered the questions in our security & privacy questionnaire. Please let us know via a comment here when you've run through the security & privacy questionnaire and can share your findings with us.

Comment by @ylafon May 22, 2019 (See Github)

It would be good also to expand on the use case (it is currently vague), as well as examples? Thanks,

Comment by @rknoll May 28, 2019 (See Github)

Thanks for the initial read! I've added the security & privacy answers to this doc: https://github.com/rknoll/content-index/blob/master/SECURITY_AND_PRIVACY.md I've also added two use case scenarios here: https://github.com/rknoll/content-index#usage-scenario-1 Let me know if this makes it clear enough or if it needs more elaboration, thanks!!

Discussed Jun 12, 2019 (See Github)

Ken: this is really early - the idea is e.g. on android you have google assistant, and native apps can give this info to the assistant and they can act on it. This is so PWAs can give data to the index.

Alice: a loose API - adding an object to the service worker registration.

Dan: lgtm

Ken: should it only be tied to service worker?

Dan: can we close this one off for now?

Alice: they did note in their alternatives considered that they considered extending the cache interface. I was confused as to what is going to be consuming it. It wasn't clear from the explainer.

Peter: that was my wonder as well - there was a mention of android slices - but what would...

Dan:

Peter:

Alice: they asked us to open issues in their repo. Also: it has a needs spec comment. that could have 2 possible interpretations- we should maybe have 2 labels.

[Meta discussion on labels

Comment by @kenchris Jun 12, 2019 (See Github)

Just a few quick comments

  • why only one icon type/size? (look at web app manifest)
  • why not directly available from the main thread without having a SW registered (like the Cache API)?
Comment by @kenchris Jun 12, 2019 (See Github)

We would like to see more examples of how this related to other browsers/runtimes, but as an early design this looks good and would like to see more as you move ahead.

Comment by @kenchris Jun 12, 2019 (See Github)

Closing for now, please reopen when you have something more for us to review