Comments (3)
This is a great question. As we know, every user-agent has different ways to handle blocking autoplay. Allowing autoplay on foo.com
doesn't mean that user explicitly set foo.com
in their user setting. It could be
- a user-agent uses the user-gesture activation and a user clicks on
foo.com
- a user-agent uses the user-gesture activation and will propagate the allow permission to all its child frames, then a user clicks on
bar.com
andfoo.com
is a child frame embedded insidebar.com
- a user-agent uses a special way (eg. chrome's media engagament index) which indicates media on
foo.com
would be allowed to autoplay - a user explictly allow
foo.com
to autoplay by adding it to a user-agent specific setting list - a user explicitly disallow
foo.com
to autoplay. But a user performs a supported behavior on the page (eg. user gesture activation, or click on certain media element) which allowsfoo.com
to be allowed to autoplay.
There might still be more different situations depending on a user-agent's implementation. Considering so many different situations can happen on one result, I think it's very low risk that this API can be used for fingerprinting.
from autoplay.
For the reference, MediaWG had discussed this issue on March last year.
In short, this API doesn't expose any new information to the web. It's just simplify how web developers can query the result without using different kind of workarounds. All the information they can know via the new API will be equal to what they can know now, which is performed by observing the media element's events and statues (eg. playing
, timeupdate
).
In addition, here is the privacy review I requested in case anyone is interested in.
from autoplay.
In the MediaWG minutes I posted above, the conclusion is that there is no major concern about privacy for this API, because web developers can use current existing media element API to get the same result. It's also hard to mitigate privacy concerns in all cases for media for the current existing API.
Therefore, I'm going to mark this issue as closed.
from autoplay.
Related Issues (20)
- CFC: Issues #3, #6, and #7 - sync vs. async HOT 11
- The final decision of autoplay detection API name HOT 60
- Media autoplay permission HOT 25
- Alternate API design HOT 18
- Throw an exception when authors pass an unsupported constructor or element to `getAutoplayPolicy()`
- Need to adjust IDL to make overload definitions distinguishable? HOT 2
- Preventing sites from prompting users on Autoplay HOT 4
- The API restricts autoplay options to current status quo HOT 5
- Publish FPWD HOT 1
- Relationship to Permissions Policy HOT 1
- Split security and privacy considerations HOT 1
- FPWD Horizontal reviews
- Autoplay Policy Detection API i18n self-review HOT 4
- Autoplay Policy Detection API accessibility self-review HOT 1
- Declarative Autoplay Policy Detection
- Query by a Media Type feels inconsistent HOT 6
- Relation to prefers-reduced-motion HOT 2
- Spec should document fingerprinting and XSLeak risk
- notifying the site of a browser intervention can be user harming HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from autoplay.