Re: [w3c/permissions] Discuss how query() makes abuse harder to detect. (#166)

I think "To defend against this" might overstate the efficacy, but mentioning ambient notice as a mitigation seems helpful. Maybe:

> The UA might provide notice of when permissions are in use on a page which might increase the visibility of abuse.

To be clear, I don't think this resolves #52 at all; the privacy impact of the feature is substantial, even if it's now noted in the spec. 

The ability to subscribe to permission state changes makes the piggybacking even easier to disguise, as the embedded script can access the sensor at the same time as the originating site has received permission.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/pull/166#issuecomment-357567939