Is it enough justification for HTTPS? Chrome: “Web Bluetooth API is a powerful new feature (…) make it available only to secure contexts“
-
-
Replying to @tankredhase
@tankredhase I can get your camera, microphone, sensors, geolocation with an injected js. But not bluetooth. I think there is no consistency1 reply 0 retweets 0 likes -
Replying to @firt
@firt good point. I guess they'd put those apis behind a secure origin if they could w/o breaking the web /cc@slightlylate1 reply 0 retweets 0 likes -
Replying to @tankredhase
@tankredhase@firt : we're also going to be removing most of those APIs from insecure origins.1 reply 1 retweet 2 likes -
Replying to @slightlylate
@slightlylate@tankredhase Well, that will brake lot of webapps. It should be done with time, care and promotion.2 replies 0 retweets 0 likes -
Replying to @firt
@firt: first we're going to give these features "amnesia". No persistent permission grants on HTTP /cc@tankredhase1 reply 0 retweets 2 likes -
Replying to @slightlylate
@firt: we *are* trying to get the word out & ease transition: Upgrade-Insecure-Resources, Lets Encrypt, etc. etc. /cc@tankredhase1 reply 0 retweets 0 likes -
Replying to @slightlylate
@firt: and what you were reacting to -- new features only over TLS -- is part of that strategy /cc@tankredhase1 reply 0 retweets 0 likes -
Replying to @slightlylate
@slightlylate the problem I see now is that the path is not so clear in the whole community. Without the final goal in mind, it seems weird1 reply 0 retweets 0 likes
@firt: Can you elaborate? We're making a lot of noise about the goal; see: http://www.w3.org/2001/tag/doc/encryption-finding/ …
-
-
Replying to @slightlylate
@slightlylate I know but that is just a small microclimate. I see most devs complaining about some tls requirements. Don't understand why.1 reply 0 retweets 0 likes
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
& Web Standards TL; Blink API OWNER
Named PWAs w/
DMs open. Tweets my own; press@google.com for official comms.