- From: Dominique Hazael-Massieux via cvs-syncmail <cvsmail@w3.org>
- Date: Fri, 16 Jul 2010 09:13:07 +0000
- To: public-dap-commits@w3.org
Update of /sources/public/2009/dap/camera
In directory hutz:/tmp/cvs-serv31001
Modified Files:
Overview.html
Log Message:
added some actual security/privacy considerations
Index: Overview.html
===================================================================
RCS file: /sources/public/2009/dap/camera/Overview.html,v
retrieving revision 1.76
retrieving revision 1.77
diff -u -d -r1.76 -r1.77
--- Overview.html 16 Jul 2010 08:58:40 -0000 1.76
+++ Overview.html 16 Jul 2010 09:13:05 -0000 1.77
@@ -63,19 +63,9 @@
<h2>Security and Privacy Considerations</h2>
<!-- @@@ get inspiration from FileAPI spec -->
<!-- @@@ make note of leaking private date through EXIF -->
- <p class='note'>
- <strong>The overall architecture for addressing privacy in DAP is still
- under construction. As it is finalized, there may be changes made to
- this specification to reflect requirements or support for privacy-related
- functionality.</strong>
- </p>
-
- <h3>Privacy considerations for implementers of Capture functionality</h3>
+ <p>This specification builds upon the security and privacy protections provided by the [[!HTML5]] <code>input type="file"</code> and the [[!FILE-API]] specifications; in particular, it is expected that any offer to start capturing content from the user’s device would require a specific user interaction on an HTML element that is entirely controled by the user agent.</p>
- <p>A conforming implementation of this specification MUST provide a
- mechanism that protects the user's privacy and this mechanism SHOULD
- ensure that privacy information is not revealed without user's
- informed consent.</p>
+ <p>In addition to the requirements already highlighted in the [[!HTML5]] and [[!FILE-API]] specifications, implementors should take care of additional leakage of privacy-sensitive data from captured media. For instance, embedding the user’s location in a captured media might transmit more private data than the user might be expecting.</p>
</section>
@@ -86,7 +76,7 @@
<p><code>MediaFile</code> captures a single photo, video or sound
captured by the device. It inherits
- from <code>File</code> [[FILE-API]]</p>
+ from <code>File</code> [[!FILE-API]]</p>
<dl title="[NoInterfaceObject] interface MediaFile : File" class="idl">
Received on Friday, 16 July 2010 09:13:08 UTC