W3C home > Mailing lists > Public > public-device-apis-log@w3.org > February 2019

Re: [deviceorientation] Add API for requesting permission to receive device motion / orientation events (#57)

From: Maciej Stachowiak via GitHub <sysbot+gh@w3.org>
Date: Fri, 01 Feb 2019 21:11:50 +0000
To: public-device-apis-log@w3.org
Message-ID: <issue_comment.created-459868974-1549055509-sysbot+gh@w3.org>
@TimvanScherpenzeel 
- We (Apple) consider all of the cited threats to be real threats. We trust our  security experts

- We consider first-party fingerprinting to be a threat, not just third-party fingerprinting.

- We don't accept the argument that fingerprinting attack surface can be added freely because other fingerprinting attack surface already exists. We agree with the [TAG Security and Privacy Questionnaire's view on sensor data](https://w3ctag.github.io/security-questionnaire/#sensor-data). (In any case, there are risks more severe than fingerprinting.)

Given these considerations, it's unlikely we will enable this API by default on Apple platforms. We will however consider enabling it via user consent if there's agreement on a permissions API (which there n=mostly seems to be).




-- 
GitHub Notification of comment by othermaciej
Please view or discuss this issue at https://github.com/w3c/deviceorientation/issues/57#issuecomment-459868974 using your GitHub account
Received on Friday, 1 February 2019 21:11:52 UTC

This archive was generated by hypermail 2.3.1 : Friday, 1 February 2019 21:11:53 UTC