Intent to require Secure Context for Web Notifications

The Notifications API [0] allows websites to show notifications outside of the browser viewport, integrating into the native OS-like notification system. In combination with service workers this can be used to send push notifications that work even when the website is not opened. While the latter h

Re: Proposal to adjust testing to run on PGO builds only and not test on OPT builds

Just a heads up, it looks like this landed sometime last week for platforms that support PGO. This has an unintended consequence of making it look like perf data for integration branches went awol, but in fact you need to switch from looking at "opt" data to "pgo" data. Unfortunately since we didn

Intent to implement and ship: Gamepad Extensions `multi touch` and `light indicator`

Summary: In order to support controllers which have multi touch and light bar features like Sony DualShock 4. The `*multi touch*` and `*light indicator*` APIs for gamepad extensions are the things we must have. In `*GamepadTouch*` API, it would make us know touch surface's dimension and its unique

Re: Intent to implement and ship: Gamepad Extensions `multi touch` and `light indicator`

Neither of the words "security" or "privacy" appear in this spec (most w3 web specs have at least a token attempt at a "Privacy and Security Considerations" section). At a surface glance this appears to add additional fingerprinting exposure. Have you talked to the privacy team about ways to minimi

Re: Intent to implement and ship: Gamepad Extensions `multi touch` and `light indicator`

Hi Daniel, We didn't have a chance to discuss privacy issues in Gamepad Extension or Gamepad API. We were trying to get responses for the Privacy review [1] but without any updates yet. Cheers, [1] https://lists.w3.org/Archives/Public/public-privacy/2018AprJun/0030.html -- Daosheng Mu Software

Re: Intent to require Secure Context for Web Notifications

Thanks for doing this Johann. On Tue, Feb 26, 2019 at 12:31 AM Johann Hofmann wrote: > The Notifications API [0] allows websites to show notifications outside of > the browser viewport, integrating into the native OS-like notification > system. In combination with service workers this can be use

Re: Intent to implement and ship: Gamepad Extensions `multi touch` and `light indicator`

To add to Dan's comments here... Assuming that I'm reading this correctly [1], the fingerprinting risks are pretty extreme here. In the touch spec, we have a monotonically increasing counter that doesn't appear to be origin-bound in any way. What is the purpose of this identifier? In the light