Re: for discussion: ACTION-630 (apis and tags for bookmarking)

Looks good to me.

I believe during our last conference call we decided to go with this as it 
is. 

> I propose this text for 7.4.3:
> User agents often include features that enable Web content to update
> the user's bookmark file, e.g. through a JavaScript API. If 
> permitted unchecked, these features can serve to confuse users by, 
> e.g., placing a bookmark that goes by the same name as the user's 
> bank, but points to an attacker's site.
> Web user agents MUST NOT permit Web content to add bookmarks without
> explicit user consent.
> Web user agents MUST NOT permit Web content to add URIs to the 
> user's bookmark collection that do not match the URI of the page 
> that the user currently interacts with.
> This addresses Adam's concern as discussed during the last conference 
call.
>