diff --git a/index.html b/index.html index fdeb221..2a96135 100644 --- a/index.html +++ b/index.html @@ -849,8 +849,8 @@

delivered.

- A push subscription without a [=push subscription/window-accessible scope=] is - deactivated when its associated service worker registration is + A push subscription without a [=push subscription/window-accessible scope=] MUST + be deactivated when its associated service worker registration is unregistered, though a push subscription MAY be deactivated earlier.

@@ -913,7 +913,7 @@

The contents of a push message are encrypted [[RFC8291]]. However, the push service is still exposed to the metadata of messages sent by an application server to a user agent over a push subscription. This includes the - timing, frequency and size of messages. Other than changing push services, which + timing, frequency, and size of messages. Other than changing push services, which user agents may disallow, the only known mitigation is to increase the apparent message size by padding.

@@ -953,10 +953,6 @@

as |oldSubscription|, and `null` as |newSubscription|. The user agent MUST deactivate the affected subscriptions in parallel.

-

- When a service worker registration is unregistered, any associated push - subscription MUST be deactivated. -

The push endpoint MUST NOT expose information about the user to be derived by actors other than the push service, such as the user's device, identity or location. See