First Draft of Permissions for Device API Access Published

The Device APIs and Policy Working Group has published the First Public Working Draft of Permissions for Device API Access. A number of Web APIs, in particular those used to access private or sensitive data from the hosting device, are meant to be discoverable, as well as disabled or enabled on a site-by-site or application-by-application basis, depending on the security context. For instance, the feature element as defined in the Widget Packaging and Configuration specification allows a widget runtime engine to grant access only to the specific APIs that the configuration file of the widget listed. This document identifies and names the various permissions that are attached to existing Web APIs. Learn more about the Ubiquitous Web Applications Activity.