- From: youennf via GitHub <sysbot+gh@w3.org>
- Date: Wed, 08 Apr 2020 07:45:05 +0000
- To: public-webrtc-logs@w3.org
Related to or a dupe of https://github.com/w3c/mediacapture-main/issues/607. > deviceIds be simple monotonically incremented integers should be sufficient for our use case This has been discussed in the past. If you are incrementing integers and try to persist them so that they can be used by web pages across navigations, these integers will end up becoming a tracker for those users that use non built-in camera/microphone devices. These integers might be unique to the user and not even tied to an origin. If you do not have double-keyed storage, users are anyway being tracked with or without device Ids (given IDs are regenerated anytime website data like IDB is cleared). The spec now mentions double keyed storage, maybe the wording should be made stronger? Note also that the spec now mandates device Ids to only be exposed after the page is capturing. This makes it difficult to be used as a tracker in practice. And once page is capturing, device IDs are probably not the most personal information that is leaking to the page. -- GitHub Notification of comment by youennf Please view or discuss this issue at https://github.com/w3c/mediacapture-main/issues/682#issuecomment-610805356 using your GitHub account
Received on Wednesday, 8 April 2020 07:45:08 UTC