[webkit-dev] WebKit position on Web NFC
rniwa at webkit.org
Wed Jan 22 00:15:28 PST 2020
I'm not sure what specifics you're looking for but the issue is that we
don't believe permission prompt is sufficient mitigation. Ordinary people
don't understand the full security & privacy implications of granting NFC
access when asked.
- R. Niwa
On Wed, Jan 22, 2020 at 12:04 AM François Beaufort <
fbeaufort at google.com> wrote:
> Gentle ping.
> On Mon, Jan 13, 2020 at 12:56 PM François Beaufort <
> fbeaufort at google.com> wrote:
>> As promised earlier, here's the intent to experiment thread URL we've
>> just sent to blink-dev:
>> It would be greatly appreciated if you could share specifics about your
>> Some alternative designs would also help moving this discussion forward.
>> Thank you,
>> On Mon, Jan 6, 2020 at 10:48 PM Maciej Stachowiak <mjs at apple.com> wrote:
>>> We oppose this feature and will not implement it.
>>> We do not believe a permission prompt is a sufficient mitigation for the
>>> serious security and privacy risks raised by this specification. In
>>> addition, we think exposing direct hardware access to the web is a bad idea
>>> and compromises the device-independence of the web platform.
>>> We can provide more details if desired but it may take a few days.
>>> On Jan 5, 2020, at 11:40 PM, François Beaufort <
>>> fbeaufort at google.com> wrote:
>>> Hello WebKit Dev folks,
>>> Following Maciej's invitation to send requests for positions on Web API
>>> proposals to webkit-dev, we would like to know WebKit's position on Web
>>> NFC: https://w3c.github.io/web-nfc/
>>> Web NFC aims to provide sites the ability to read and write to nearby
>>> NFC devices. The current scope is limited to NDEF, a lightweight binary
>>> message format. Low-level I/O operations with the ISO-DEP protocol and
>>> Host-based Card Emulation (HCE) are not supported.
>>> FYI, an intent to experiment will be posted soon on blink-dev.
>>> I'll update this webkit-dev thread with the URL when done.
>>> TAG Review: https://github.com/w3ctag/design-reviews/issues/461
>>> Chromestatus URL: https://www.chromestatus.com/features/6261030015467520
>>> Mozilla standards-positions:
>>> Thank you,
>>> webkit-dev mailing list
>>> webkit-dev at lists.webkit.org
> webkit-dev mailing list
> webkit-dev at lists.webkit.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the webkit-dev