Re: Additional security and privacy considerations?

> A discreet notification that a page as requested (and maybe  
> received) location information might go a long way.  By keeping the  
> information visible, users no longer have the maze to negotiate.   
> This might be similar to the notification that a popup has been  
> blocked, or that the site has been authenticated.  Not to malign  
> Doug's fine work in any way or to pick on Firefox in particular, but  
> using the latest Firefox beta there isn't any feedback once the  
> initial permission is granted.

Thanks! ;-)

As I mentioned to the group, these sort of notifications are either  
too small or unnoticeable to be of value, or are too large and flash  
to be pleasing.

>
> As for permission expiration, it might make sense to provide  
> configuration to limit the time.  I doubt that it would be an  
> imposition to acquire permission on a regular basis.  To me, daily  
> would be a chore, I am lazy enough to appreciate the use of cookies  
> and authentication that persists for several days.  Of course, we  
> should be careful to ensure that this form of laziness does not turn  
> into users granting an open licence.  The scenario you cite is one  
> I'd be very keen to prevent.  With this in mind I'd be OK with a  
> default of a day, but I might be inclined to bump the value up to  
> about a week if I could.


It might be a great idea for some UA to experiment with a "Remember  
for 7 days" UI and offer us feedback, but my initial impression is  
that when told to remember, we shouldn't forget.

Regards,
Doug Turner

Received on Tuesday, 12 May 2009 04:15:44 UTC