Re: Update on Chrome's WebVR policy regarding secure origins.

Hi list,

I worry that leaving it visible on all the time will teach the user to
ignore it (like ads sidebars and cookie banners),
thus nullifying the negative effect of leaving it on all the time compared
to https sites.

On the other hand, CORS and CSP already exist to specify what resources can
and can't be loaded from a given website;
maybe we could use those to restrict what contents are allowed?


See you,
Cecile