Re: [deviceorientation] Add API for requesting permission to receive device motion / orientation events (#57)

@TimvanScherpenzeel 
- We (Apple) consider all of the cited threats to be real threats. We trust our  security experts

- We consider first-party fingerprinting to be a threat, not just third-party fingerprinting.

- We don't accept the argument that fingerprinting attack surface can be added freely because other fingerprinting attack surface already exists. We agree with the [TAG Security and Privacy Questionnaire's view on sensor data](https://w3ctag.github.io/security-questionnaire/#sensor-data). (In any case, there are risks more severe than fingerprinting.)

Given these considerations, it's unlikely we will enable this API by default on Apple platforms. We will however consider enabling it via user consent if there's agreement on a permissions API (which there n=mostly seems to be).




-- 
GitHub Notification of comment by othermaciej
Please view or discuss this issue at https://github.com/w3c/deviceorientation/issues/57#issuecomment-459868974 using your GitHub account

Received on Friday, 1 February 2019 21:11:52 UTC