Re: [sensors] Spec should include mandatory mitigations for privacy harms / risks (#397)

> @snyderp do you actually mean https://html.spec.whatwg.org/multipage/interaction.html#triggered-by-user-activation when you say user gesture? There was possible confusion over terminology.

That a frame / context cannot successfully access the feature / until the frame has received a user gesture.  This would be similar to Storage Access API, where all requests for the relevant functionality are rejected *before prompting for permission* until the permission request is being triggered by a user gesture.  Future requests in that context can then be made w/o needing to be accompanied by a user gesture.

I believe this matches @reillyeon's statement too

-- 
GitHub Notification of comment by snyderp
Please view or discuss this issue at https://github.com/w3c/sensors/issues/397#issuecomment-558459754 using your GitHub account

Received on Tuesday, 26 November 2019 04:55:30 UTC