Skip to content

Is "file:" protocol considered a "secure context", if not why? #66

Open
@guest271314

Description

@guest271314

Is file: protocol considered a secure context? Is reading and writing to the user filesystem at file: protocol considered to be any less "secure" than JavaScript code a web site reading and writing to the user filesystem where the https: protocol is being used? If so, for what technical reasons?

Given that any and all external network communications can be considered insecure, file: protocol, specifically within the scope of Native File System https://github.com/WICG/native-file-system should be considered a "secure context", where no external network communication is necessary.

(Was referred to this specification from WICG/file-system-access#58 (comment))

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions