Probing for frequency readouts might increase fingerprinting risk.

tobie · tobie · commit db578b4feae9 · 2017-01-26T15:07:02.000+01:00
Closes #99.
diff --git a/index.bs b/index.bs
@@ -282,6 +282,10 @@ limiting event rates available to web application developers.
 
 Note: do we really want this mitigation strategy?
 
+Frequency polling in [=periodic reporting=] mode
+might allow the fingerprinting of hardware or implementation types,
+by probing which actual frequencies are supported by the platform.
+
 Minimizing the accuracy of a sensor's readout
 generally decreases the risk of fingerprinting.
 User agents should not provide unnecessarily verbose readouts of sensors data.
diff --git a/index.html b/index.html
@@ -1774,6 +1774,9 @@ <h2 class="heading settled" data-level="5" id="security-and-privacy"><span class
 User agents may reduce the risk by
 limiting event rates available to web application developers.</p>
    <p class="note" role="note">Note: do we really want this mitigation strategy?</p>
+   <p>Frequency polling in <a data-link-type="dfn">periodic reporting</a> mode
+might allow the fingerprinting of hardware or implementation types,
+by probing which actual frequencies are supported by the platform.</p>
    <p>Minimizing the accuracy of a sensor’s readout
 generally decreases the risk of fingerprinting.
 User agents should not provide unnecessarily verbose readouts of sensors data.

-Original file line number
+Diff line change
 User agents may reduce the risk by
 limiting event rates available to web application developers.p>
    <p class="note" role="note">Note: do we really want this mitigation strategy?p>
 +   <p>Frequency polling in <a data-link-type="dfn">periodic reportinga> mode
 +might allow the fingerprinting of hardware or implementation types,
 +by probing which actual frequencies are supported by the platform.p>
    <p>Minimizing the accuracy of a sensor’s readout
 generally decreases the risk of fingerprinting.
 User agents should not provide unnecessarily verbose readouts of sensors data.