On 24/07/2013 12:00 AM, Eric Rescorla wrote:
> On Tue, Jul 23, 2013 at 8:50 PM, cowwoc <cowwoc@bbs.darktech.org
> <mailto:cowwoc@bbs.darktech.org>> wrote:
>
> Hi Cullen,
>
> To be clear: The JS is asking the browser to tell it whether
> access to the camera was denied by the user, or by the browser for
> reasons outside the control of the user. The former is a
> recoverable error, the latter is fatal.
>
> Do you see any privacy implications there?
>
>
> Sure. It tells the JS whether you have a potentially usable camera.
>
> That may or may not be a big deal, but it is certainly information
> leakage.
Fair enough. So I guess the next question is: is this a big deal?
I can tell you that from a developer troubleshooting point of view,
exposing this information would be helpful.
Gili