Oh, I forgot some. https://w3c.github.io/proximity/ "There are no specific security and privacy considerations beyond those described in the Generic Sensor API [GENERIC-SENSOR]." Same concern. https://github.com/w3c/accelerometer/blob/gh-pages/security-questionnaire.md https://github.com/w3c/gyroscope/blob/gh-pages/security-questionnaire.md https://github.com/w3c/magnetometer/blob/gh-pages/security-questionnaire.md https://github.com/w3c/orientation-sensor/blob/gh-pages/security-questionnaire.md https://github.com/w3c/ambient-light/blob/gh-pages/security-questionnaire.md https://github.com/w3c/proximity/blob/gh-pages/security-questionnaire.md 3.5 Does this specification expose any other data to an origin that it doesn’t currently have access to? Why do all of these say "No"? 3.12 Does this specification expose temporary identifiers to the web? It seems like all of the sensors would qualifier as temporary identifiers. Especially things that change less frequently, like proximiity and ambient light. 3.13 Does this specification distinguish between behavior in first-party and third-party contexts? I thought it did, based https://w3c.github.io/sensors/#losing-focus -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/w3ctag/design-reviews/issues/207#issuecomment-351559801
Received on Wednesday, 13 December 2017 23:35:31 UTC