On iOS, Web Push only works for an installed app, never a Safari tab. Use Share → Add to Home Screen, then open it from there.
Generates this device's keys and asks for notification permission. The keys are non-extractable and never leave the phone.
Compare both fingerprints with what the client printed. If they differ, something between you and it substituted a key — do not approve anything.