I'm somewhat concerned about giving websites the ability to revoke permissions. It seems this could lead to a confusing user experience where the user ends up seeing the same dialog over and over.

[jwrosewell]

I'm not the original poster of #128, but it does seem a legitimate concern no matter the source, so therefore adding here with a known GitHub user.

The question raises an important concept. The website might decide not to use a permission it has been granted, but it shouldn't be able to change the user's permission. Is this indeed the case?

[miketaylr]

@jwrosewell this discussion is happening in #127 (comment) - it's probably better to continue in that issue than open a new one.