Re: [b2g] WebAPI Security Discussion: Idle API

2012-05-31 Thread ptheria...@mozilla.com
"Final" proposal - please reply by the end of Friday with any concerns/changes. When trying to combine the comments above, with the comments in the bug (715041) it occurred to me that the privacy risk is more significant on the desktop than on the phone, and therefore it will be the implementati

Re: [b2g] WebAPI Security Discussion: Idle API

2012-05-01 Thread Jonas Sicking
Sorry for not responding until now. Was away on vacation. > Inherent threats:  Privacy implication - signalling mulitple windows at > exactly the same time could correlate user identities and compromise privacy I think there's another threat, which is simply monitoring if the user is active on t

Re: WebAPI Security Discussion: Idle API

2012-04-26 Thread Lucas Adamski
I haven't seen any comments on this for a while so I'll be closing this out and posting on Friday. Please send any last comments before noon PDT. Thanks! Lucas. On Apr 15, 2012, at 11:12 PM, Lucas Adamski wrote: > Please reply-to dev-weba...@lists.mozilla.org > > Name of API: Idle API > Ref

WebAPI Security Discussion: Idle API

2012-04-15 Thread Lucas Adamski
Please reply-to dev-weba...@lists.mozilla.org Name of API: Idle API Reference: https://wiki.mozilla.org/WebAPI/IdleAPI Brief purpose of API: Notify an app if the user is idle General Use Cases: Notify a web page is a user is idle (e.g. to change a status in an instant messaging program) Inhere