- From: Nick Doty <npdoty@ischool.berkeley.edu>
- Date: Tue, 12 Jul 2016 13:36:49 -0700
- To: "public-privacy (W3C mailing list)" <public-privacy@w3.org>
- Message-Id: <85723E12-07C5-4353-B02D-667271BF48F1@ischool.berkeley.edu>
Anyone on public-privacy interested in taking the lead on a privacy review of Wake Lock over the next 6 weeks? This is highlighted for WebAppSec folks, but it might also be relevant to this and other specs on privacy: > proposed approach to manage permissions to use the Wake Lock API, whereby an embedded cross-origin browsing context is never allowed, as described in the first note in section 5. How permissions are handled for embedded contexts seems to be a frequently-arising issue. —Nick > Begin forwarded message: > > From: Frederick Hirsch <w3c@fjhirsch.com> > Subject: RfC: Wide review of Wake Lock API; deadline August 31st > Date: July 11, 2016 at 5:41:07 PM PT > Cc: public-review-announce@w3.org, Chairs Chairs <chairs@w3.org>, Dominique Hazael-Massieux <dom@w3.org> > Resent-From: public-review-announce@w3.org > Archived-At: <http://www.w3.org/mid/93AD5CF1-197D-43EF-B201-9633DFF718F0@fjhirsch.com> > > Dear Chairs of APA WG, PING, WebAppSec WG, Web Platform WG, TAG, CSS WG, Web Perf WG: > > The Device & Sensors Working Group is soliciting the review of your groups on the Wake Lock API on our way to Candidate Recommendation status: > https://www.w3.org/TR/wake-lock/ > > From APA, PING and WebAppSec, we hope to get a review from an accessibility, privacy and security perspective of the specification. > > We particularly call upon the attention of the WebAppSec WG on the proposed approach to manage permissions to use the Wake Lock API, whereby an embedded cross-origin browsing context is never allowed, as described in the first note in section 5. > > For both WebAppSec and PING, we note that the group used the self-review questionnaire in the development of this specification: > https://lists.w3.org/Archives/Public/public-device-apis/2016Mar/att-0038/00-part > > From WebPlatform and TAG, we hope to get a review of the overall API and its insertion in the rest of the platform. > > Since the API extends the Screen interface defined by the CSS WG in the CSSOM View module, the CSS WG might wish to confirm this extension is in-line with the design of the interface. > > Likewise, since the API relies on the Page Visibility state defined by the WebPerf WG, that group might wish to comment on the proper usage of that signal. > > Reviews from other groups are also naturally welcome. > > We would appreciate to receive your feedback before the end of August; the preferred method for feedback is to file issues in our github repository: https://github.com/w3c/wake-lock/issues ; > > alternatively, send a mail to our public mailing list public-device-apis@w3.org with a subject prefixed with [wake-lock]. > > Thank you > > regards, Frederick > > Frederick Hirsch > Device & Sensors Working Group Chair > > @fjhirsch
Received on Tuesday, 12 July 2016 20:37:23 UTC