23934 2013-11-27 13:17:13 +0000 Proposal: Always launch permission prompt to avoid leakage 2014-05-15 10:11:42 +0000 1 1 1 Unclassified WebRTC Working Group Media Capture and Streams unspecified PC All RESOLVED WONTFIX P2 normal --- 1 stefan.lk.hakansson public-media-capture public-media-capture oldest_to_newest 96871 0 stefan.lk.hakansson 2013-11-27 13:17:13 +0000 The core of this proposal, which is outlined in [1] as "B. Don't leak", is that the permission prompt is always launched when getUserMedia is called (even if no device matches the mandatory constraints). This bug is filed to make it simpler to record any decision we make related to this proposal. [1] http://lists.w3.org/Archives/Public/public-media-capture/2013Nov/0161.html 106027 1 stefan.lk.hakansson 2014-05-15 10:11:42 +0000 After a discussion on the list [1], a resolution people seem to be able to live with is that the prompt is not always launched, but that to limit leakage the "Privacy and Security" section says something about rate limiting gUM. I've updated the bug "Security and Privacy Considerations section needed" [2] with the input that rate limiting should be added. [1] http://lists.w3.org/Archives/Public/public-media-capture/2014May/0071.html [2] https://www.w3.org/Bugs/Public/show_bug.cgi?id=22354