On Thu, Jan 11, 2018 at 10:26 AM, Gervase Markham <g...@mozilla.org> wrote: > On 10/01/18 18:40, Tom Ritter wrote: >> This proposal is that. Add a permission 'canvas-imagedata' that will >> return 'granted' when Resist Fingerprinting mode is disabled, and >> 'prompt' when RP is enabled and appropriate. > > As this is basically a "is RF turned on?" flag, why not just call it > that? Or are we going to add more permissions for any other things about > RF mode that people might want to query?
Two reasons. The first is what you said: We are thinking idly about other permissions. (Like timezone: https://bugzilla.mozilla.org/show_bug.cgi?id=1426232 ). But that doesn't preclude us using a single 'is resist-fingerprinting turned on' flag. The real argument is buried in that github discussion, which I'll just copy/paste: Separately, I don't like the idea of a general "Can this site fingerprint you?" permission prompt. My hope is that some of the many fingerprinting vectors will be reconsidered in a variety of browsers. For example: so few websites actually use a gamepad, and the tail of users who have gamepads (and which model) is so small; GamePads seems like something that could reasonably be prompted for, as opposed to letting every website on the Internet get that information right away. Similarly, I have a very theoretical idea about making a prompt for Timezone. I'm not trying to talk about either of those in this thread, I'm just using them to demonstrate that in the future I hope multiple browsers will consider prompts for fingerprinting resistance of different APIs, and having a single permission that implies A, B, and C in one browser, B and C in another browser, and C in an earlier version of that browser is a bad situation to be in spec and compatibility-wise. -tom _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
