Isolated Web Apps

[reillyeon]

Request for Mozilla Position on an Emerging Web Specification

• Specification Title: Isolated Web Apps
• Specification or proposal URL (if available):
• Explainer URL (if available): https://github.com/WICG/isolated-web-apps/blob/main/README.md
• Caniuse.com URL (optional):
• Bugzilla URL (optional):
• Mozillians who can provide input (optional):

Other information

This proposal provides a way to build applications using web technologies that will have useful security properties unavailable to normal web pages. To enable stronger security these applications are packaged into Web Bundles, signed by their developer, and distributed to end-users through one or more of the potential methods described in the explainer.

The explainer is divided into 4 documents:

• The main explainer covers the overall goals of the proposal.
• The scheme explainer covers the design of the proposed isolated-app:// scheme.
• The permissions explainer covers an addition to the Web Application Manifest which allows a minimum Permissions Policy to be applied to the entire application.
• The updates explainer covers how applications will be updated.

This proposal will feel familiar to Mozillians who worked on the FirefoxOS project. There’s been good discussion on WICG/isolated-web-apps#10 about lessons learned from packaging apps for FirefoxOS.

I have requested a TAG review at w3ctag/design-reviews#842.