W3C home > Mailing lists > Public > public-device-apis-log@w3.org > November 2019

Re: [sensors] Spec should include mandatory mitigations for privacy harms / risks (#397)

From: Reilly Grant via GitHub <sysbot+gh@w3.org>
Date: Mon, 25 Nov 2019 21:40:16 +0000
To: public-device-apis-log@w3.org
Message-ID: <issue_comment.created-558352268-1574718010-sysbot+gh@w3.org>
I am supportive of a user gesture being require to request permission to access a sensor. Activation of a sensor for which permission has already been obtained should not require a user gesture.

This is what Chrome intends to implement. Currently sensor permission is granted to all origins by default which renders the user gesture requirement moot. There are plans to change these defaults and require an explicit permission request, which would require a user gesture. Implementing this change will break existing web content and so a migration period is planned.

-- 
GitHub Notification of comment by reillyeon
Please view or discuss this issue at https://github.com/w3c/sensors/issues/397#issuecomment-558352268 using your GitHub account
Received on Monday, 25 November 2019 21:40:17 UTC

This archive was generated by hypermail 2.4.0 : Monday, 4 July 2022 12:47:57 UTC