search

microsoft / win32-app-isolation

Tools and documentation for Win32 app isolation
MIT License
1.27k stars 33 forks source link

[Inquiry]: How does this affect the UI? #17

Closed mikehearn closed 1 year ago

mikehearn commented 1 year ago

Description

If win32 sandboxing is enabled, is that visible to end users anywhere (e.g. appinstaller)? If not, is it meant to be a feature for improving the security of the app itself? This is how Apple advertises its own app sandbox for example: it's not to let you install apps of uncertain provenance or trustworthiness, but rather, to reduce the impact of security bugs in the app itself. But I think what most people want is the ability to install apps without worrying about whether they're trustable or not.

ddsilva-msft commented 1 year ago

Hey @mikehearn, in Public Preview an application running isolated will get individual privacy toggles, but we don't have any other UI indicators. We want to incentivize applications to run isolated and the UI "badging" for these applications is one of the things we're looking into for future releases to help users and IT administrators choose apps that are good for them.

cchavez-msft commented 1 year ago

Hi, @mikehearn. Thank you so much for your input. Please, if you think you have more inquiries related to this issue, feel free to re-open it. We highly appreciate your participation.

Thank you again.