"Keep it in the browser"?

[anon36227541]

@predict9320

PWA or websites are the way to go?

If you’re asking for my opinion on the debate, I wouldn’t have one on this. I’m just providing relevant information so that people make informed decisions. Overall, I’m in the same boat as you. Here are some relevant threads I found on the forum:

• State of the Web App: Current Woes and Promising Futures
• Privacy Guides should have a blog post about potential security concerns with Electron-based desktop apps
• Electron vulnerabilities:
• What's better security-wise: Mobile app / Website / PWA
• Email clients VS Native email provider app

@predict9320

So even what the other two users said, it is better to use native apps e. g. for services recommended by PG (foss and to some degree audited) to mitigate the downsides.

Here is some advice from @xe3:

@xe3

• Native if I trust the app/developer.
• Webapp if I don’t. Or if I’m just trying something out.

If you trust the apps/developers that PG recommends, you can consider using their native apps. The usual issues of using native apps are that they can fingerprint you more granularly and have elevated privileges in the OS compared to the browser, among other things, but these are non-issues if they are trustworthy.

If you don’t trust them, use web apps to confine their usage to the browser to prevent elevated privileges and fingerprinting. But keep in mind the prominent attack vector of browsers. Use a secure browser, keep it up-to-date.