Re: [mediacapture-image] [PTZ] Should `applyConstraints` request permission? (#223)

We have precedent in Chrome for delaying an automatic reply to a permission request to prevent deducing user state (in particular, notification permission requests in incognito). We can use that same approach here, if deemed necessary. Is the concern that this would help with fingerprinting users? I'm not very familiar with the media API so I'm not entirely sure how big the fingerprinting surface is already without PTZ and how much PTZ adds.

On the other hand, presenting a user with a prompt for a capability they do not have seems like an unnecessary cognitive load, probably confusing and also different than how all other permissions work (you don't get camera prompts if you don't actually have a camera for example) and something that I would like to avoid if at all possible.

I'm afraid I don't entirely understand the concern with the use case and the compatibility with Chrome's UX. The PTZ request should be able to be made even if you already have Camera without PTZ, but it's probably just me misunderstanding the use case or the concern.

-- 
GitHub Notification of comment by andypaicu
Please view or discuss this issue at https://github.com/w3c/mediacapture-image/issues/223#issuecomment-620553498 using your GitHub account

Received on Tuesday, 28 April 2020 11:41:39 UTC