Re: [w3c/permissions] Explicitly limit permission lifetimes (#231)

I think it would make sense to file a new, more-focused issue in this repository, so that we can pull in the right stakeholders to address @martinthomson's excellent [comment](https://github.com/w3c/permissions/issues/231#issuecomment-805388266) without confusing them about the geolocation-specific discussion.

I would be surprised if geolocation is actually unique in wanting stricter privacy rules than the average permission. There are probably other similarly-sensitive permissions, including many of the controversial hardware-access ones. If we decide to standardize those stricter rules at all, it probably makes sense to add a flag to the permission, similar to https://w3c.github.io/permissions/#allowed-in-non-secure-contexts, to add the extra constraints. (Even that flag might need some [revisiting](https://github.com/mikewest/securer-contexts), but that's independent of this issue.)

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/issues/231#issuecomment-806024046

Received on Wednesday, 24 March 2021 17:36:20 UTC