ISSUE-28: Requirement for NO security prompting
noModalPrompt
Requirement for NO security prompting
- State:
- CLOSED
- Product:
- Policy Framework Requirements
- Raised by:
- Frederick Hirsch
- Opened on:
- 2009-10-06
- Description:
- A number of workshop position papers noted that prompting the user for permission when making security decisions can be harmful, especially when repeated often.
Do we have a requirement for no user security prompting, or perhaps only allow user-configuration and then no prompting?
Proposal: Add policy Requirement: User agents MUST NOT present modal dialogs to prompt users for security decisions no user prompting for security decisions
Add policy Requirements: Users SHOULD have control over general configuration of security decisions
Rationale is in 2.1 of the OMTP position paper [1], the Mozilla position paper [2], Johnson/Bellovin [3]
[1] http://www.w3.org/2008/security-ws/papers/OMTP_Security_Position_Paper.pdf
[2] http://www.w3.org/2008/security-ws/papers/mozilla.html
[3] http://www.w3.org/2008/security-ws/papers/security_assurance_webapi.pdf
- Related Actions Items:
ACTION-28 on Paddy Byers to Document the output of the prompting discussion - due 2009-10-21, closedACTION-29 on Paddy Byers to Enter issues based on issue-28 - due 2009-10-28, closedACTION-30 on Frederick Hirsch to Create a draft Policy Requirements document - due 2009-10-28, closed- Related emails:
- Proposed updates to Pending and Raised ISSUES, suggest 'API Requirements and Design Decisions' document (from Frederick.Hirsch@nokia.com on 2011-01-04)
- Re: Agenda - Distributed Meeting 2010-06-16 (from jmorris@cdt.org on 2010-06-16)
- Agenda - Distributed Meeting 2010-06-16 (from Frederick.Hirsch@nokia.com on 2010-06-16)
- Re: Agenda - Distributed Meeting 2010-06-16 (from enewland@cdt.org on 2010-06-15)
- Re: Draft minutes 2010-06-09 (from Frederick.Hirsch@nokia.com on 2010-06-10)
- Draft minutes 2010-06-09 (from robin@robineko.com on 2010-06-09)
- Re: Modal prompts vs notifications (was: Agenda - Distributed Meeting 2010-06-02) (from jsalsman@talknicer.com on 2010-06-09)
- Re: Agenda - Distributed Meeting 2010-06-02 (from jsalsman@talknicer.com on 2010-06-09)
- Re: Agenda - Distributed Meeting 2010-06-02 (from dom@w3.org on 2010-06-09)
- Re: Agenda - Distributed Meeting 2010-06-02 (from jsalsman@talknicer.com on 2010-06-09)
- Re: Agenda - Distributed Meeting 2010-06-02 (from dom@w3.org on 2010-06-09)
- Open Actions - please review and complete actions before F2F (from frederick.hirsch@nokia.com on 2010-03-02)
- Agenda: Distributed Meeting 2009-10-28 (from frederick.hirsch@nokia.com on 2009-10-27)
- corrected draft minutes 2009-10-21 for approval (v2) (from frederick.hirsch@nokia.com on 2009-10-21)
- Draft minutes 2009-10-21 (from frederick.hirsch@nokia.com on 2009-10-21)
- RE: Agenda - Distributed Meeting 2009-10-21, v2 (from david.rogers@omtp.org on 2009-10-21)
- Re: ISSUE-28: [Policy] Requirement for NO security prompting [Security Policy Framework — General] (from frederick.hirsch@nokia.com on 2009-10-21)
- Agenda - Distributed Meeting 2009-10-21, v2 (from frederick.hirsch@nokia.com on 2009-10-21)
- Re: ISSUE-28: [Policy] Requirement for NO security prompting [Security Policy Framework — General] (from paddy.byers@gmail.com on 2009-10-21)
- Agenda - Distributed Meeting 2009-10-21 (from frederick.hirsch@nokia.com on 2009-10-20)
- Agenda - Distributed Meeting 2009-10-14 (from robin@robineko.com on 2009-10-13)
- RE: ISSUE-28: [Policy] Requirement for NO security prompting [Security Policy Framework - General] (from ian@hixie.ch on 2009-10-09)
- RE: ISSUE-28: [Policy] Requirement for NO security prompting [Security Policy Framework - General] (from richard.tibbett@orange-ftgroup.com on 2009-10-09)
- RE: ISSUE-28: [Policy] Requirement for NO security prompting [Security Policy Framework - General] (from ian@hixie.ch on 2009-10-09)
- RE: ISSUE-28: [Policy] Requirement for NO security prompting [Security Policy Framework - General] (from richard.tibbett@orange-ftgroup.com on 2009-10-08)
- Re: ISSUE-28: [Policy] Requirement for NO security prompting [Security Policy Framework < General] (from tlr@w3.org on 2009-10-07)
- Draft minutes 2009-10-07 (from frederick.hirsch@nokia.com on 2009-10-07)
- Re: ISSUE-28: [Policy] Requirement for NO security prompting [Security Policy Framework < General] (from Jere.Kapyaho@nokia.com on 2009-10-07)
- RE: ISSUE-28: [Policy] Requirement for NO security prompting [Security Policy Framework - General] (from Marcin.Hanclik@access-company.com on 2009-10-07)
- RE: ISSUE-28: [Policy] Requirement for NO security prompting [Security Policy Framework - General] (from Marcin.Hanclik@access-company.com on 2009-10-07)
- Re: ISSUE-28: [Policy] Requirement for NO security prompting [Security Policy Framework — General] (from frederick.hirsch@nokia.com on 2009-10-07)
- RE: ISSUE-28: [Policy] Requirement for NO security prompting [Security Policy Framework — General] (from Marcin.Hanclik@access-company.com on 2009-10-06)
- Agenda - Distributed Meeting 2009-10-07 (from frederick.hirsch@nokia.com on 2009-10-06)
- ISSUE-28: [Policy] Requirement for NO security prompting [Security Policy Framework — General] (from sysbot+tracker@w3.org on 2009-10-06)
Related notes:
There seem to be consensus on avoiding modal prompts, and this is reflected in the current policy-reqs draft: http://dev.w3.org/2009/dap/policy-reqs/#user-control-over-decisions
Propose to close
References [1] and [3] seem to be diametrically opposed on the question of prompts, and reference [2] cites a very obscure example from an organization which uses prompts for installation of downloaded extension and plug-in software.
For example, [3] states, "The user must explicitly authorize any and all accesses to devices.... a two-page sequence is necessary before [device access] can take place: a first page to check the permissions; it will either go on to the next page automatically, or it will display an error message telling the user to correct permissions."
How was the idea that there is a consensus there arrived at?
Display change log
