Re: [w3c/screen-orientation] Rewrite privacy considerations section (PR #215)

@marcoscaceres commented on this pull request.



> +        is being held, and also prevents the [=secondary=] orientation type and
+        associated angles from being user for fingerprinting purposes.
+      </p>
+      <p>
+        To resist fingerprinting (e.g., in private browsing), user agents MAY:
+      </p>
+      <ul>
+        <li>Depending on the screen's aspect ratio, only return either
+        {{OrientationType/"portrait-primary"}} or
+        {{OrientationType/"landscape-primary"}} for the value of the
+        {{ScreenOrientation/type}} attribute.
+        </li>
+        <li>For any [=natural=] orientation ([=portrait=] or [=landscape=]),
+        always return `0` for the value of the {{ScreenOrientation/angle}}
+        attribute. And for any rotated/opposite orientation, always return `90`
+        for the value of the {{ScreenOrientation/angle}} attribute.

Oh! I quite like the idea of taking the orientation to which the page was navigated and using it to lie (i.e., and not expose the natural orientation). 

No browser does the above today, which is why I spec'ed it based on "natural" orientation, but that doesn't mean they couldn't.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/screen-orientation/pull/215#discussion_r1002826155
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/screen-orientation/pull/215/review/1152448414@github.com>