Re: [Bug 25245] Specify "access" in the context of getMediaDevices from Martin Thomson on 2014-04-03 (public-media-capture@w3.org from April 2014)

From: Martin Thomson <martin.thomson@gmail.com>
Date: Thu, 3 Apr 2014 10:23:33 -0700
To: "public-media-capture@w3.org" <public-media-capture@w3.org>
Message-ID: <CABkgnnWMrqmYUQv+bQqwi=tT5RconfJ+X6nKqTgvEeO-m_3Mbw@mail.gmail.com>

On 3 April 2014 00:46,  <bugzilla@jessica.w3.org> wrote:
> I also believe we have decided that "deviceId" should be different for pages
> from different origins, so that one page cannot tell another page about devices
> (information leakage). This also hasn't been captured in the spec, as far as I
> can tell.

Yes, otherwise we are creating a super-cookie.

An important point to add: any persistent identifiers need to be
regenerated/reset when cookies are cleared for the origin.

Received on Thursday, 3 April 2014 17:24:01 UTC