Re: [device-posture] Update Privacy considerations (#145)

@darktears please check that the iframe-related bits reflect the latest in https://github.com/w3c/device-posture/issues/111 and propose changes as appropriate. I added an inline issue link for that in https://github.com/w3c/device-posture/pull/145/commits/9548e1e3b6deb3047a32444c282c14da7eea8f16 to bring this to the attention of privacy reviewers. Note I proposed to rename the section from "iframes" to "cross-origin iframes", while this applies to same-origin iframes equally. This was to highlight the cross-origin-ness that is of particular interest to privacy reviewers.

More generally, my expectation here is the specification as of now matches the ongoing Origin Trial feature scope. With  the trial experience and feedback we're in a better position to make an informed decisions wrt iframe exposure and any other design aspects. I'm looking to initiate a PING review soon, so want to incorporate all information relevant to the reviewers in this privacy considerations section. I will also provide the [self-assessment](https://github.com/w3c/device-posture/blob/gh-pages/security-privacy-self-assessment.md) as an additional input. Please also check that resource is up to date.

-- 
GitHub Notification of comment by anssiko
Please view or discuss this issue at https://github.com/w3c/device-posture/pull/145#issuecomment-2134772576 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 28 May 2024 09:36:53 UTC