On 2012-04-24 9:50 AM, Randell Jesup wrote:
>a small handful of apps: "turn on the camera at some indefinite time
in the
>future, without user interaction at the time".
That need is exactly what some WebRTC apps need (think VoIP-like
service - replacement for Skype, Google Hangouts where you want a
user-controlled/styled answer/call/etc buttons - you get the idea).
Users will not want to go through a security request on each call, and
app developers will not want to have "fixed" call/end buttons they can't
style (and I don't think this works anyways, at least not well enough to
consider).
This is emphatically *not* "turn on X _without user interaction_ at some
programmatically-determined time in the future". I would argue that
this is exactly the use case for OS-provided call/end buttons, and that
actual security provided to the end user trumps application bling.
There might be a valid case for offering a small amount of stylability
on the buttons, e.g. round/square, variable size, controllable
background color (watch out for the "black icon on black background"
trick, though) -- CSS makes this quite easy.
And maybe some UX team time should go into writing a HIG document.
zw
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security
