Re: Additional protection against automatic camera capture

On 09/18/2014 03:29 PM, Frederick Hirsch wrote:
> has PING weighed in on this?

No.

>
> regards, Frederick
>
> Frederick Hirsch, Nokia
> @fjhirsch
>
>
>
> On Sep 15, 2014, at 11:32 AM, Dominique Hazael-Massieux <dom@w3.org> wrote:
>
>> A couple of weeks ago, discussing bug 25809 (“call me” URLs), I
>> suggested some potential additions to the spec to make it harder to trap
>> users in getting automatically and unexpectedly “on air”:
>> * requiring an engagement gesture for getUserMedia
>> * linking permanent permissions to the embedded stack of origins
>> * letting pages opt-in to allow their embedded frames to make use of
>> getUserMedia
>>
>> There was support from some, and hesitations from others.
>>
>> To move forward with this, we could:
>> * ask the chairs to call for consensus on this now
>> * ask for further input from the Web Apps Security WG and/or the TAG
>> * leave the spec as is, with a note asking for input from readers on
>> these questions
>>
>> Thoughts?
>>
>> Dom
>>
>>
>>
>

Received on Thursday, 18 September 2014 14:47:42 UTC