I’ve been thinking about the whole stick of web permissions lately and realized that for me, personally, the whole “allow camera” is not the main Thing I care about, but moreso stuff like javascript, wasm and such. Those things are often hard to configure in webbrowsers, and often only allow a all or nothing aproach.
So I’ve been thinking if we can keep the per-site permission concept, but add another layer of how much “trust” the site has. The idea would be that users configure a default level of trust a unknown site has (or based on some filter list)
and that determines what the site can do. For example:
blocked → no connection is made (i.e adblocker)
basic → html5 rendering; css; no cookies
normal → basic + cookies/webstorage
interactive → normal + js + wasm
application → interactive + allow stuff like camera; webcam (viceoconferencing), manage fullscreen on it’s own. etc.
I’d like to hear what you think of this aproach, could it work? the specific levels or names of them are not important, those can be changed, I’m interested in thoughts on the concept