On Bug 23934 "Always launch permission prompt to avoid leakage"

Bug 23934 has been sitting there for quite some time with no further input.

Some persons (me included) argued that the permission prompt should 
always be launched (even if there are no devices available to meet the 
required constraints). The argument has been that otherwise the app 
(which may not have any intent to use camera or mike - its intent is to 
fingerprint) can experiment around with a lot of different constraint 
combinations in gUM without the user knowing, and in that way fingerprint.


On the other hand many have argued that if there are no input devices 
available that meets the requirements of the app the user should not be 
bothered at all.

My proposal is that we leave the text as is, i.e. there is no prompt if 
the required constraints cannot be met, and mitigate fingerprinting by 
adding wording about rate limiting gUM in the privacy and security section.

How does this sound?

Stefan

Received on Wednesday, 14 May 2014 17:01:36 UTC