Brad,
On Thursday 29 January 2015 22:50:00 Brad Hill wrote:
> 1. Privacy and tracking. How does the presence of specific crypto
> elements and discoverable keys which are not Origin-scoped not create
> privacy violations?
Depends entirely on who controls activation and discoverability of the
feature. Keys that are not origin-scoped may be extremely useful, but create
the risk you describe in a mental model where the user is just a hoard of
click-cattle. On the other hand, asking for good UI is like asking for the
magic wand. A solution can be found IMHO in defined use cases where the
browser is allowing the keys only in certain contexts and after informing the
user. This is in fact the same as activating geolocation IMHO..
--Rigo