On Thu, Apr 27, 2017 at 8:42 AM, Salvador de la Puente <sdelapue...@mozilla.com> wrote: > Well, I'm not saying "don't fix it" but if we switch the API off then > other-than-evil ways of using the API will never happen and, as Belen said > before, it undermines the confidence on the Web platform.
I'd think that leaving the platform in an insecure state undermines confidence more than removing features that are barely used and cause security problems. And even if you'd reduce the amount of detail it exposes, it seems that would still leak some bits, which is more than we leak today (so I'm not sure why the CSS solution with less values is acceptable for instance). At which point you're left with asking the user and that leads to dialog fatigue, figuring out how to even ask the question, etc. This may be a worthwhile problem to solve, but any acceptable solution likely leads to a different API shape anyway. In the interim we should not dispatch this event. -- https://annevankesteren.nl/ _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
