I’ve seen many users going straight in and redeploying the Electron Apps without even considering the PWA or the Windows Legacy App. Although clearly we’re not in a position to anger anyone or make strong demands, it still remains our duty to warn you of the security risks the Electron Apps pose right now.
The rebuilt Electron Windows App with the new certificate has been sent to Mandiant to check whether it is secure. It will take some time before we can distribute it 100% safely. We need several days, probably more.
Back to PWA - Yes it is missing a few features compared to the Electron App. But I believe that a good number of users don't need these features anyway. Nevertheless, we’ve decided to have our developers work around the clock to add these features.
Also it is worth mentioning that by nature the PWA is safer than an Electron App, as it runs in your browser sandbox without a need for an external binary and relies on a core that is kept up-to-date with your browser auto-updates. The Electron App on the other hand is a binary with a built-in core which can't be updated by the user.
Web Client in PWA Mode Versus Electron App

Prerequisites - hosted or Split DNS
PWA will only work for installations that have a fully qualified domain and a valid SSL certificate.
- If you host 3CX in the cloud using a 3CX certificate, this is automatic.
- If you have an on-premise installation you must have configured Split DNS with a valid 3CX certificate or custom certificate. You are gonna need this anyway.
PWA - What can it do now
- Fully functional client for Chrome and Microsoft Edge Chromium
- Runs securely within the browser within its security framework and its libraries
- Zero admin - automatically updates
- No local installation needed - no install or uninstall required
- Click2Call and Auto answer capability
- Runs in background & reliably supports Push Notifications
- Launch on startup when machine is rebooted
- Fully supports Yealink, Jabra and soon Plantronics headsets
What PWA will be able to do next week
- Current dialer will include the BLF view
What PWA will be able to do in Update 8
Separate window Dialer with BLF
What PWA will not be able to do for quite some time - or never
- Microsoft Tapi Integration for some older CRM applications
- Launch External Applications upon receiving a call
- Be launched via the tel: protocol by 3rd party external apps
Our Super Sub - the Windows Legacy App

Every successful football team has its Super sub - the striker who comes in last minute to score that goal that saves the day.
Well 3CX has its Super Sub too, and it's the 2021 Windows Legacy App. Built, compiled and tested for the last time on 10th August 2021 during the Covid days - even the best Nation State Cyber Team has not been able to get at it.
True it's not the youngest member of the team but it works. It works very well. And it's secure.
Considering the situation we’re in, we’ve decided to extend the support period of our Windows Legacy App. And when we put this behind us, we’ll give it a refresh to allow it to be our super sub for years to come.
And it does TAPI, Hotkeys, External Apps - TODAY

