This is an archived snapshot of W3C's public bugzilla bug tracker, decommissioned in April 2019. Please see the home page for more details.

Bug 23934 - Proposal: Always launch permission prompt to avoid leakage
Summary: Proposal: Always launch permission prompt to avoid leakage
Status: RESOLVED WONTFIX
Alias: None
Product: WebRTC Working Group
Classification: Unclassified
Component: Media Capture and Streams (show other bugs)
Version: unspecified
Hardware: PC All
: P2 normal
Target Milestone: ---
Assignee: public-media-capture@w3.org
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-11-27 13:17 UTC by Stefan Hakansson LK
Modified: 2014-05-15 10:11 UTC (History)
1 user (show)

See Also:

Attachments

Description Stefan Hakansson LK 2013-11-27 13:17:13 UTC 
The core of this proposal, which is outlined in [1] as "B. Don't leak", is that the permission prompt is always launched when getUserMedia is called (even if no device matches the mandatory constraints).

This bug is filed to make it simpler to record any decision we make related to this proposal.

[1] http://lists.w3.org/Archives/Public/public-media-capture/2013Nov/0161.html
Comment 1 Stefan Hakansson LK 2014-05-15 10:11:42 UTC 
After a discussion on the list [1], a resolution people seem to be able to live with is that the prompt is not always launched, but that to limit leakage the "Privacy and Security" section says something about rate limiting gUM.

I've updated the bug "Security and Privacy Considerations section needed" [2] with the input that rate limiting should be added.

[1] http://lists.w3.org/Archives/Public/public-media-capture/2014May/0071.html
[2] https://www.w3.org/Bugs/Public/show_bug.cgi?id=22354