w3c / vibration

Vibration API
https://w3c.github.io/vibration/
Other
13 stars 11 forks source link

The user must be able to disable use of the Vibration API #50

Open matatk opened 1 week ago

matatk commented 1 week ago

The Security and privacy considerations section states:

For these reasons, the user agent MAY inform the user when the API is being used and provide a mechanism to disable the API (effectively no-op), on a per-origin basis or globally.

APA WG previously reviewed this API and made a comment that users SHOULD be able to disable use of the API. We've reviewed the latest version, and feel that things have changed such that this requirement ought to be a (RFC 2119) MUST now. Here are the key reasons:

anssiko commented 1 week ago

@matatk and APA WG, thank you for your re-review. The context and rationale for the recent change in this RFC 2119 term is in https://github.com/w3c/vibration/pull/47#pullrequestreview-2393739221

The group's plan is to imminently publish a new CRS that matches current implementations and to continue evolve the specification with special consideration for issues -- including this one -- that suggest changes to existing implementations and thus may impact web compatibility.

The group is aware of an early experimental implementation in Firefox that showed a UI to the user to allow disable the API. We want to gather more implementation experience on this. The past design discussions around this feature are documented in 2.11 of https://github.com/w3c/vibration/issues/36 to inform the work.

The group would like to explicitly confirm with you that APA WG is supportive of this approach so that we can proceed with the CRS publication. Thank you!

matatk commented 1 week ago

Hi @anssiko; yes; APA WG is happy with your proposed approach. We look forward to following up with you after the CRS is published.

P.S. I realise that adding the 'needs resolution' label might have been confusing until after the CRS is published; apologies for that.