On Wed, Oct 26, 2016 at 5:50 AM, Aryeh Gregor <a...@aryeh.name> wrote:
> On Tue, Oct 25, 2016 at 9:43 PM, Eric Rescorla <e...@rtfm.com> wrote: > > Setting aside the policy question, the location API for mobile devices > > generally > > gives a much more precise estimate of your location than can be obtained > > from the upstream network provider. For instance, consider the case of > the > > ISP upstream from Mozilla's office in Mountain view: they can only > localize > > a user to within 50 meters or so of the office, whereas GPS is accurate > to > > a few meters. > > Yes, but the privacy impact of such an increase in precision is much > less than if you only knew geo IP data. > > > And of course someone who is upstream from the ISP may just > > have standard geo IP data. > > Are there real-world MITMs who are upstream from the ISP? > Who are upstream from your local ISP? Yes, all over the place. -Ekr > (Governments presumably compromise the ISP itself by court order or > equivalent.) > _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
