[mediacapture-main] Spec does no handle fingerprinting related to exposing non default capture devices (#559)

youennf has just created a new issue for https://github.com/w3c/mediacapture-main:

== Spec does no handle fingerprinting related to exposing non default capture devices ==
The spec calls out that the number of devices is a potential fingerprint.
Most devices have a standard number of cameras and microphones that web sites can infer from information like navigator.userAgent.
Devices with additional cameras/microphones (say USB webcams) can be fingerprinted if enumerateDevices is exposing these additional cameras/microphones.

I wonder whether this specific fingerprint should be called out in the specification.
Countermeasures should be implementable/could be proposed.
In particular, implementations should be allowed to remove any device deemed appropriate when copying resultList in filteredList (step 2.6.2 of enumerateDevices).

Please view or discuss this issue at https://github.com/w3c/mediacapture-main/issues/559 using your GitHub account

Received on Friday, 18 January 2019 22:38:43 UTC