W3C home > Mailing lists > Public > public-webrtc@w3.org > August 2019

[mediacapture-main] Move enumerateDevices behind permission (#612)

From: pes via GitHub <sysbot+gh@w3.org>
Date: Wed, 21 Aug 2019 13:00:08 +0000
To: public-webrtc@w3.org
Message-ID: <issues.opened-483406523-1566392406-sysbot+gh@w3.org>
snyderp has just created a new issue for https://github.com/w3c/mediacapture-main:

== Move enumerateDevices behind permission ==
Currently websites can enumerate hardware capabilities with enumerateDevices().  Querying device capabilities is the kind of pseudo-identifier that allow users to be passively identified / fingerprinted.  To prevent this, websites should, to the greatest degree possible, need user permission to query device capabilities.  Websites should therefor need permission to access enumerateDevices().

Related: the Moz efforts discussed at the bottom of this comment : https://github.com/w3c/mediacapture-main/issues/607#issuecomment-514460424

Please view or discuss this issue at https://github.com/w3c/mediacapture-main/issues/612 using your GitHub account
Received on Wednesday, 21 August 2019 13:00:14 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 19:18:48 UTC