Re: [b2g] WebAPI Security Discussion: Web Telephony

2012-04-30 Thread Jim Straus
Hello Lucas - A "fun dialer" might be a phone app that simulates a rotary pone. I'm expecting that the phone API is only available to "trusted" apps (okay, maybe someone going through a bunch of hoops to give a non-trusted app the permissions). You can have several "fun phone" apps on your d

Re: [b2g] WebAPI Security Discussion: Web Telephony

2012-04-30 Thread Lucas Adamski
So I'm a bit confused as to the purpose of the dialer API with trusted apps. The stated use case is "fun dialer" but if the user uses the fun dialer as their default dialer, and the one time they need it it fails to dial an emergency number (because the developer failed to account for that use

Re: [b2g] WebAPI Security Discussion: Web Telephony

2012-04-30 Thread Jim Straus
I believe that the user should not be able to replace their built-in telephone app except with a certified telephony app (though they can have multiple telephony apps installed) so that we know emergency calls can always be made. And that whatever mechanism is used to make emergency calls (tho

Re: [b2g] WebAPI Security Discussion: Open Web App API

2012-04-30 Thread Jim Straus
Along the lines of Thinker's remarks about controlling when to update, some updates may be large (a new set of maps for an offline navigation app is a good example) and I might not want to update them when on a paid or slow pipe (cellular). Also, I sometimes don't update if comments indicate an

Re: [b2g] WebAPI Security Discussion: Web Telephony

2012-04-30 Thread Mike Habicher
Regarding emergency calls: although the regulatory requirements vary, generally, phones must be able to make emergency calls under all circumstances, even if the phone contains no or an invalid SIM card, or if the phone is on a lock-screen. (For example, my BlackBerry lock screen UI has three