Re: Limiting requests from the internet to the intranet.

On Wed, Jan 6, 2016 at 2:06 PM, Chris Palmer <palmer@google.com> wrote:

> On Wed, Jan 6, 2016 at 2:04 PM, Oda, Terri <terri.oda@intel.com> wrote:
>
> Just to add another data point: I know some of Intel's products use the
>> Pebble-like scenario and have been told that blocking would be a
>> significant problem for some of our groups.  It most recently came up in
>> discussions of RealSense 3d camera support, and I suspect some of the
>> projects involve relatively new tech hardware that doesn't yet have
>> standards for communication, and the teams involved were hoping to use web
>> APIs to make things easier for developers.
>>
>> I can ask around internally for more information beyond "yes this is a
>> thing that we use and removing it would be a hardship" if people are
>> interested in more details.
>>
>
> The proposal at this point is not to remove it, but to require your Real
> Sense cameras to opt in to being contacted by public web origins.
>

Put another way: If you can't update the device/software to serve the
opt-in header, then it's unambiguously clear that the device/software lacks
the bare minimum capability to be safely exposed to arbitrary Web sites.

Received on Wednesday, 6 January 2016 22:43:46 UTC