Intent to deprecate: insecure Geo requests

2017-02-07 Thread Michelangelo De Simone
TL;DR the Geolocation API will be restricted to secure contexts in Firefox 55 (due in August). Hi there, as a follow-up to [1], we're moving forward to restrict Geolocation API only to secure contexts. This is due to a number of important reasons: 1. Chrome and Safari have already deprecated

Re: Intent to restrict to secure contexts: navigator.geolocation

2016-10-25 Thread Michelangelo De Simone
On Tue, Oct 25, 2016 at 12:17 PM, Chris Peterson wrote: > Assuming every MITM and website already has approximate geo IP location, we > could fuzz the navigator.getCurrentPosition() result for HTTP sites. That Please don't. We used to have fuzzed/synthesized position in