w3c / push-api

Push API
https://w3c.github.io/push-api/
Other
145 stars 40 forks source link

PushSubscription and underlying concept should be better separated #373

Open annevk opened 2 months ago

annevk commented 2 months ago

At the moment it seems as if you'd store the private key on an internal slot of the JS object, which isn't safe.

The JS object is also created "in parallel" which doesn't actually work. It needs to be created as part of the steps of the eventual queued task.