Rendered at 18:58:30 GMT+0000 (Coordinated Universal Time) with Cloudflare Workers.
bigiain 2 days ago [-]
Until I see support in other browsers, I'll assume this is as useful as Internet Explorer Silverlight apps.
Perhaps usable in an entirely locked down corporate environment where centralised IT with "standard desktop builds" and MDM will enforce Chrome use. But without at least Safari support, and ideally Firefox (plus forks), this remains a useless toy to me.
bityard 2 days ago [-]
Not answered in TFA: What does it mean to "install" a web app in Chrome?
ameliaquining 2 days ago [-]
It means the site is saved to your home screen (on mobile) or taskbar/dock (on desktop). When opened that way, it appears in a window with minimal browser chrome and with the site's icon and branding instead of the browser's, so it somewhat resembles a native app (even though under the hood the browser is still doing all the work). Sites that offer this will often also use a Service Worker to remain functional in the absence of an internet connection, since native apps are usually expected to do that; these and some other web APIs are often conceptually bundled together under the term "progressive web apps", originally coined by Google. See https://developer.mozilla.org/en-US/docs/Web/Progressive_web... for more.
I would expect web developers these days to mostly be aware of this, since it's been in widespread use for a while, so I didn't find it odd that the article assumed that level of background.
CharlesW 2 days ago [-]
> …"progressive web apps", originally coined by Google.
To make it a bit less faceless while humans still matter, it was coined by Alex Russell and Frances Berriman in 2015. Russell worked at Google at the time, Berriman at Code for America.
2 days ago [-]
lanycrost 1 days ago [-]
After x years you'll have one prompt element which will create a whole website
nixosbestos 2 days ago [-]
Since apparently this thread needs context, yes, you can install PWAs from Firefox on Android and I've heard it's returning to desktop.
This just seems to be a way (in Chrome) to trigger the already existing PWA install flow but from some styles element on the page, rather than the user knowing how to trigger the install flow (usually multiple clicks).
Edit: I wonder if you could do some click-jacking attacks here...
EffrafaxOfWug 1 days ago [-]
> can install PWAs from Firefox on Android
The last time I checked firefox on android didn't support PWAs like Chrome does. It just creates a shortcut to your homescreen. Chrome on android use WebAPKs. You can verify this by looking at the package id in the app info of the created shortcut.
Zardoz84 2 days ago [-]
> the browser's control over the button's label text, language, and appearance means it can trust the user's click as a genuine signal of intent.
Like we don't saw fake download bottons imitating the legitime button.
llbbdd 23 hours ago [-]
Prompting for installation opens a dialog controlled and populated by the browser that has the name and author of the app to be installed. You can test it on the example page here, linked from the article:
That not avoid you clicking a fake button imitatatin the good button.
llbbdd 1 hours ago [-]
Right, but it does gate the actual installation behind a secondary approval in a trustworthy prompt that the page author doesn't control. The page author could of course make a dangerous-but-trustworthy-looking app that would pass muster for the user's approval, but at that point it's not any different than social engineering the installation of any regular malware, e.g. convincing a user to download and execute a dangerous binary.
doublerabbit 2 days ago [-]
Browsers shouldn't have an install. Can we stop half-baked HTML XML syntax at this point?
I forsee abuse of such:
const button = document.querySelector('install');
button.addEventListener('promptdismiss', () => {
console.log('User dismissed the install prompt but forcing installation of adware, malware and bitcoing mining anyway');
});
llbbdd 23 hours ago [-]
This isn't possible, the PWA install flow is managed by the browser.
Perhaps usable in an entirely locked down corporate environment where centralised IT with "standard desktop builds" and MDM will enforce Chrome use. But without at least Safari support, and ideally Firefox (plus forks), this remains a useless toy to me.
I would expect web developers these days to mostly be aware of this, since it's been in widespread use for a while, so I didn't find it odd that the article assumed that level of background.
To make it a bit less faceless while humans still matter, it was coined by Alex Russell and Frances Berriman in 2015. Russell worked at Google at the time, Berriman at Code for America.
This just seems to be a way (in Chrome) to trigger the already existing PWA install flow but from some styles element on the page, rather than the user knowing how to trigger the install flow (usually multiple clicks).
Edit: I wonder if you could do some click-jacking attacks here...
The last time I checked firefox on android didn't support PWAs like Chrome does. It just creates a shortcut to your homescreen. Chrome on android use WebAPKs. You can verify this by looking at the package id in the app info of the created shortcut.
Like we don't saw fake download bottons imitating the legitime button.
https://microsoftedge.github.io/Demos/pwa-install-element/in...
I forsee abuse of such: