W3C home > Mailing lists > Public > public-device-apis-log@w3.org > February 2019

Re: [deviceorientation] Add API for requesting permission to receive device motion / orientation events (#57)

From: tangobravo via GitHub <sysbot+gh@w3.org>
Date: Thu, 07 Feb 2019 17:29:58 +0000
To: public-device-apis-log@w3.org
Message-ID: <issue_comment.created-461522100-1549560597-sysbot+gh@w3.org>
@richtr - Although I agree that fingerprinting concerns are likely to be solvable with some of the mitigations you mention that is not the only potential privacy concern.

To take one example; even heavily quantized, obfuscated, and reduced-frequency sensor data would give some information about whether the user is standing up or lying down. Whether that is a significant enough privacy concern to require explicit user consent is certainly debatable (most vendors appear not to think so at the moment), but it does appear Apple / WebKit have made their minds up here.

I believe spatial computing use cases on the web would survive a permissions prompt. It would be unfortunate however to have a widely-released iOS version with the API disabled by default **and** without a permissions API implemented.

So I still hope for the final iOS 12.2 release Apple will either have an opt-in permissions API implemented or will decide to flip the default setting until that permissions API is ready. To me that strikes a good balance between addressing privacy concerns but without being quite as hostile to web developers who depend on these features.

-- 
GitHub Notification of comment by tangobravo
Please view or discuss this issue at https://github.com/w3c/deviceorientation/issues/57#issuecomment-461522100 using your GitHub account
Received on Thursday, 7 February 2019 17:30:01 UTC

This archive was generated by hypermail 2.3.1 : Thursday, 7 February 2019 17:30:02 UTC