W3C home > Mailing lists > Public > public-device-apis-log@w3.org > January 2019

Re: [deviceorientation] Add API for requesting permission to receive device motion / orientation events (#57)

From: Lars Knudsen via GitHub <sysbot+gh@w3.org>
Date: Tue, 29 Jan 2019 11:42:34 +0000
To: public-device-apis-log@w3.org
Message-ID: <issue_comment.created-458510012-1548762153-sysbot+gh@w3.org>
If the aim is to cripple/disable 3rd party ads/scripts to access sensor data for evil intentions, using Feature Policy seems to be a good way forward.  Has this been considered?  If we want to prevent the main page from accessing sensors, we have to consider how requiring installation of a native app would provide better assurance - if any at all.

In addition, permissions could be granted when installing the web application (to home screen/pwa).  Has this been considered?

If too many features require user approval or flipping switches in the global settings, the effect will most likely disappear (e.g. like most people run as Administrator on Windows as the alternative is just too cumbersome). 

-- 
GitHub Notification of comment by larsgk
Please view or discuss this issue at https://github.com/w3c/deviceorientation/issues/57#issuecomment-458510012 using your GitHub account
Received on Tuesday, 29 January 2019 11:42:36 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 19:34:27 UTC