Re: [b2g] WebAPI Security Discussion: Idle API

2012-05-31 Thread ptheria...@mozilla.com
"Final" proposal - please reply by the end of Friday with any concerns/changes. When trying to combine the comments above, with the comments in the bug (715041) it occurred to me that the privacy risk is more significant on the desktop than on the phone, and therefore it will be the implementati

Re: [b2g] WebAPI Security Discussion: Idle API

2012-05-01 Thread Jonas Sicking
Sorry for not responding until now. Was away on vacation. > Inherent threats:  Privacy implication - signalling mulitple windows at > exactly the same time could correlate user identities and compromise privacy I think there's another threat, which is simply monitoring if the user is active on t