> I'm not opposed to a trusted UI approach, but I don't think it is possible > to provide adequate functionality using a "take picture" button. The > preview point is spot on. Think about the camera apps people use - preview > is a universal feature among them.
Apps can still have a preview window; it just won't return data until the user presses a button. This allows applications to have static overlays over the preview window (e.g., lines to line up text for OCR). If you have a mandatory preview window as part of a trusted UI, then you can't have static overlays. This is why we say the button is our security feature -- preview windows can still exist. Are you worried about any other functionality issues besides the preview window issue? _______________________________________________ dev-security mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security
