Re: [deviceorientation] Add API for requesting permission to receive device motion / orientation events (#57)

Thank you for your clear reply @othermaciej.

In that case I trust that you and the security experts are making the right choice in making this change. I don't have the experience in what it takes to make a browser safe nor do I have a clear view on exactly how malicious parties are exploiting the mentioned sensor API's. The [Gyrophone](https://www.usenix.org/system/files/conference/usenixsecurity14/sec14-paper-michalevsky.pdf) reference in the TAG Security and Privacy Questionnaire is really clever.

I hope we can find an elegant solution for how the requesting of permissions is done. To be completely honest, when I started looking into the API's myself about a year and a half ago I was very surprised users did not have to give explicit permission.

-- 
GitHub Notification of comment by TimvanScherpenzeel
Please view or discuss this issue at https://github.com/w3c/deviceorientation/issues/57#issuecomment-459876205 using your GitHub account

Received on Friday, 1 February 2019 21:37:20 UTC