Re: [sensors] Spec should include mandatory mitigations for privacy harms / risks (#397)

I am supportive of a user gesture being require to request permission to access a sensor. Activation of a sensor for which permission has already been obtained should not require a user gesture.

This is what Chrome intends to implement. Currently sensor permission is granted to all origins by default which renders the user gesture requirement moot. There are plans to change these defaults and require an explicit permission request, which would require a user gesture. Implementing this change will break existing web content and so a migration period is planned.

-- 
GitHub Notification of comment by reillyeon
Please view or discuss this issue at https://github.com/w3c/sensors/issues/397#issuecomment-558352268 using your GitHub account

Received on Monday, 25 November 2019 21:40:17 UTC