W3C home > Mailing lists > Public > public-device-apis-log@w3.org > March 2018

Re: [sensors] Improve guidance on UI for user consenting

From: Alexander Shalamov via GitHub <sysbot+gh@w3.org>
Date: Tue, 06 Mar 2018 12:36:16 +0000
To: public-device-apis-log@w3.org
Message-ID: <issue_comment.created-370767932-1520339774-sysbot+gh@w3.org>
dbaron raised good points, few comments from my side.

In my opinion, `measurements might reveal all the text that the user types while they're being measured` is not applicable after [focused area](https://w3c.github.io/sensors/#focused-area) restriction was added and enforced in [can expose sensor reading](https://w3c.github.io/sensors/#concepts-can-expose-sensor-readings
).

As for the UX related point, at the moment, we are experimenting [with UI](https://bugs.chromium.org/p/chromium/issues/detail?id=796904) that should improve user awareness and provide setting to control access to device sensors. Experimentation includes:

- [Global and per-site access control](https://bugs.chromium.org/p/chromium/issues/detail?id=796904)
- [Page info dialog](https://bugs.chromium.org/p/chromium/issues/attachment?aid=321437&signed_aid=cAJa341KmS5s6gNoNoUHUw==&inline=1
)
- Location bar indicator ([1](https://bugs.chromium.org/p/chromium/issues/attachment?aid=321931&signed_aid=mRpe_BPMqJVProSJShetbg==&inline=1), [2](https://bugs.chromium.org/p/chromium/issues/attachment?aid=321932&signed_aid=Ghe5Ne7Uso1je_OddXVZiw==&inline=1), [3](https://bugs.chromium.org/p/chromium/issues/attachment?aid=321929&signed_aid=h3u52Uu5ZJPWXXY6C8m2fA==&inline=1), [4](https://bugs.chromium.org/p/chromium/issues/attachment?aid=321930&signed_aid=CFK0OmpvINupTUgSY1DjUQ==&inline=1))
- Informative disclosure UI (WIP)

I think that the specification should not enforce UI concepts, rather than provide extension points that can be used by browser engineers to improve privacy & security aspects. In my opinion, we have communicated security threats and possible mitigation strategies in the [core spec](https://w3c.github.io/sensors/#security-and-privacy), moreover, [extension specifications](https://w3c.github.io/accelerometer/#security-and-privacy) have more information whenever applicable.

-- 
GitHub Notification of comment by alexshalamov
Please view or discuss this issue at https://github.com/w3c/sensors/issues/352#issuecomment-370767932 using your GitHub account
Received on Tuesday, 6 March 2018 12:36:20 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 March 2018 12:36:21 UTC