Re: [w3ctag/spec-reviews] Review Web Bluetooth (#139)

We talked at length about the fingerprinting potential here and the difference between a user granting explicit consent ("Pair with this device") and them understanding how they're increasing their fingerprinting surface area.  It's clear that you have taken on board the written work in this area (including the [Unsanctioned Tracking Finding](https://www.w3.org/2001/tag/doc/unsanctioned-tracking/) and the [Fingerprinting Guidance](https://www.w3.org/TR/fingerprinting-guidance/) document), so we'd mostly say you've done what we would hope in light of the features you're trying to add to the web platform.  It's a tricky area though, since increasing the fingerprinting surface area (a bit) seems inevitable; I'd additionally be interested in seeing the results of the privacy assessment when you've completed it. 

Also, I'd also be curious to know more about any long-term plans you have to maintain the GATT blacklist (who decides what's included, how they decide, etc.).

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/spec-reviews/issues/139#issuecomment-257510713