Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://fosstodon.org/users/dellagustin/statuses/109757251479257788">Guilherme Dellagustin (dellagustin@fosstodon.org)'s status on Friday, 27-Jan-2023 05:23:39 JST</a><a href="https://fosstodon.org/@dellagustin" title="dellagustin@fosstodon.org"><img src="https://gnusocial.jp/avatar/92211-48-20230126202339.webp" width="48" height="48" alt="Guilherme Dellagustin" style="position: absolute; left: 0; top: 0;">Guilherme Dellagustin</a><div><a href="https://mitra.social/objects/0185ebac-d02e-6dd5-da28-b22f1fbe9adf" rel="in-reply-to">in reply to</a><ul><li><li><a href="https://gnusocial.jp/user/91647" title="sad4crapitalism@blob.cat">Sad4Crapitalism</a></li><li><a href="https://gnusocial.jp/user/91958" title="dellagustindev@blob.cat">dellagustindev</a></li></ul></div></section><article><p><a href="https://mitra.social/users/silverpill">@silverpill</a> <a href="https://blob.cat/users/dellagustindev">@dellagustindev</a> <a href="https://blob.cat/users/Sad4Crapitalism">@Sad4Crapitalism</a> I skimmed the content, I don't fully understand it at the moment, but I think I got the gist. Should be possible, but secure key / credential / secrets management is a weakness of browser extensions, see <a href="https://github.com/webap-api/webap-browser-extension/issues/1" rel="nofollow noreferrer">https://github.com/webap-api/webap-browser-extension/issues/1</a><br>Also, that wouldn't be a priority any time soon, as there is a long way to go for this to go from PoC to something really usable. Anyway, thank you for bringing this to my attention.</p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/1097484#notice-2398574">In conversation</a><time datetime="2023-01-27T05:23:39+09:00" title="Friday, 27-Jan-2023 05:23:39 JST">Friday, 27-Jan-2023 05:23:39 JST</time> <span>from <span><a href="https://fosstodon.org/@dellagustin/109757251479257788" rel="external" title="Sent from fosstodon.org via ActivityPub">fosstodon.org</a></span></span><a href="https://fosstodon.org/@dellagustin/109757251479257788">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: opengraph.githubassets.com</div><h5><a href="https://github.com/webap-api/webap-browser-extension/issues/1">Secure storage of credentials · Issue #1 · webap-api/webap-browser-extension</a></h5><div></div></header><div>Currently there is no browser API for secure storage of credentials, but there is a proposal for that: w3c/webextensions#154 In the case of this extension, it is likely that the only creadentials w...</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Guilherme Dellagustin (dellagustin@fosstodon.org)'s status on Friday, 27-Jan-2023 05:23:39 JSTGuilherme Dellagustin
in reply to
@silverpill @dellagustindev @Sad4Crapitalism I skimmed the content, I don't fully understand it at the moment, but I think I got the gist. Should be possible, but secure key / credential / secrets management is a weakness of browser extensions, see https://github.com/webap-api/webap-browser-extension/issues/1
Also, that wouldn't be a priority any time soon, as there is a long way to go for this to go from PoC to something really usable. Anyway, thank you for bringing this to my attention.
In conversationFriday, 27-Jan-2023 05:23:39 JST from fosstodon.orgpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: opengraph.githubassets.com
  Secure storage of credentials · Issue #1 · webap-api/webap-browser-extension
  Currently there is no browser API for secure storage of credentials, but there is a proposal for that: w3c/webextensions#154 In the case of this extension, it is likely that the only creadentials w...

Public

Embed Notice

HTML Code

Corresponding Notice