Re: Explicit intents privacy concern

On 27/7/12 17:17 , Greg Billock wrote:
> On Fri, Jul 27, 2012 at 3:58 AM, John Lyle <john.lyle@cs.ox.ac.uk> wrote:
>> Should all intent services provide an authorisation step (or perhas
>> an 'undo' step) when they receive a request made via intents?
> Basically, yes. The best practices there are to provide a confirmation
> or verification step for the user.
>
JCD: Ooops ? This means that for normal intent invocation, there will be 
two consenting user actions, and for explicit intent invocation, only one.
This sounds bad.
It would be much better to have a unified behaviour between normal 
intent invocation and explicit intent invocation (i.e. always require 
active consent), so that the intent provider does not need to impose a 
(possibly second) consent action.
Best regards
JC

-- 
JC Dufourd
Directeur d'Etudes/Professor
Groupe Multimedia/Multimedia Group
Traitement du Signal et Images/Signal and Image Processing
Telecom ParisTech, 37-39 rue Dareau, 75014 Paris, France
Tel: +33145817733 - Mob: +33677843843 - Fax: +33145817144

Received on Friday, 24 August 2012 09:35:20 UTC