search

w3c / device-posture

Device Posture API
https://www.w3.org/TR/device-posture/
Other
33 stars 21 forks source link

Rate limiting does not seem related to privacy #154

Closed pes10k closed 3 months ago

pes10k commented 4 months ago

This issue is being filed as part of the PING review requested here https://github.com/w3cping/privacy-request/issues/136

Section 10.4.2 notes that the API is rate limited as a strategy for protecting user privacy. I do not think this is provides any privacy improvement. My understanding from the PING call is that this is legacy / cruft text, and not related to the current API. I suggest removing or reworking this subsection then

rakuco commented 4 months ago

I'd just add that the text is fairly recent -- it was added in #145 although it was kind of rewording and reorganizing existing content. I agree that the section doesn't look like an actual mitigation, but rather a description of how the API works.