W3C home > Mailing lists > Public > public-device-apis-log@w3.org > December 2018

[deviceorientation] Add API for requesting permission to receive device motion / orientation events (#57)

From: Chris Dumez via GitHub <sysbot+gh@w3.org>
Date: Thu, 13 Dec 2018 18:52:51 +0000
To: public-device-apis-log@w3.org
Message-ID: <issues.opened-390812373-1544727169-sysbot+gh@w3.org>
cdumez has just created a new issue for https://github.com/w3c/deviceorientation:

== Add API for requesting permission to receive device motion / orientation events ==
Due to the privacy issues related to this API (e.g. [https://www.wired.com/story/mobile-websites-can-tap-into-your-phones-sensors-without-asking/](https://www.wired.com/story/mobile-websites-can-tap-into-your-phones-sensors-without-asking/) and [https://arxiv.org/pdf/1605.08763.pdf](https://arxiv.org/pdf/1605.08763.pdf)), we are considering adding to WebKit a permission dialog in order to ask the user if they want to expose their device orientation/motion to the Website.

However, because trackers already register such event listeners on top sites, we are worried about the risk of over-prompting. We wouldn't want this prompt to start showing on a lot of top-sites.

To address the issue, we'd like to propose adding a new API allowing the page's script explicitly ask for permission to access the device / motion. We think we should also require a user-gesture to call this new API.

It could look something like this (similar to Notification API):
```
[Exposed=(Window)]
interface DeviceOrientation {
  [Exposed=Window] static Promise<boolean> requestPermission();
};
```

What are your thoughts?

Please view or discuss this issue at https://github.com/w3c/deviceorientation/issues/57 using your GitHub account
Received on Thursday, 13 December 2018 18:52:53 UTC

This archive was generated by hypermail 2.4.0 : Monday, 4 July 2022 12:47:56 UTC