- From: Travis Leithead <travis.leithead@microsoft.com>
- Date: Mon, 12 Dec 2011 23:57:12 +0000
- To: Adam Bergkvist <adam.bergkvist@ericsson.com>, "public-media-capture@w3.org" <public-media-capture@w3.org>
>-----Original Message----- >From: Adam Bergkvist [mailto:adam.bergkvist@ericsson.com] > >With the current "opt-out" approach your application will also ask for >permission to use all future media types (which are hard to opt-out from >before they exist). +1 An opt-in design is secure-by-default. The trouble with the options object is that it's a name-value pair. You really just want the presence of the name to "turn-on" the requested capability, but instead you have a set of individual on/off switches which seems to over-complicate the design. Perhaps the spec can say that "if specified" a given property means "enable" even if the value is false?
Received on Tuesday, 13 December 2011 00:15:24 UTC