file:// is for the purpose of this spec a secure origin?

WICG / webusb

Connecting hardware to the web.

https://wicg.github.io/webusb/

Other

1.31k stars 131 forks source link

file:// is for the purpose of this spec a secure origin? #129

Closed nunojpg closed 6 years ago

nunojpg commented 6 years ago

this specification requires that only secure contexts as described in [powerful-features] can access USB devices.

file:// is a Potentially Trustworthy origin, but it's currently being disallowed by Chromium/Chrome.

Will this be not specified further and up to Browser implementers? Do you think this is the right choice from Chrome?

reillyeon commented 6 years ago

This question is best discussed on either the Secure Contexts specification or the Chromium issue tracker. I do not believe that individual specifications should deviate from established standards and behaviors in this space.