Re: [deviceorientation] Move fingerprintable APIs behind permissions (#85)

Wanted to second @npdoty above.  Reducing accuracy seems (i) extremely unlikely to have web compat cost, (ii) to be future proof against higher rez sensors in the future re-introducing privacy harm (which might not be the case with noise inject, as noted above), and (iii) to allow people to use device sensors w/o making themselves globally identifiable.

@maryammjd I agree that GDPR can be a useful way to think about these issues, most people on the web are not covered by GDPR, so in most cases that is not a useful privacy constraint.  Also, to echo @npdoty above, permissions seems necessary but insufficient.  The standard needs to support use cases that allow using device hardware, without giving up full trackability.  

-- 
GitHub Notification of comment by snyderp
Please view or discuss this issue at https://github.com/w3c/deviceorientation/issues/85#issuecomment-582641911 using your GitHub account

Received on Wednesday, 5 February 2020 22:22:04 UTC