O Mér, 11-11-2020 ás 11:21 -0800, Alex Cooper via webkit-dev escribiu: > Hello Webkit, > > I'd like to ask for WebKit's position on the WebXR Lighting > Estimation Module. It's an extension of the WebXr Device API from the > Immersive Web Community Group. The API allows web applications to > request both the spherical harmonics representing ambient light as > well as a reflection map. More details can be found in the explainer > and specification draft. > > Explainer: > https://github.com/immersive-web/lighting-estimation/blob/main/lighting-estimation-explainer.md > Spec Draft: https://immersive-web.github.io/lighting-estimation/ > Chromestatus: https://www.chromestatus.com/features/5704707957850112 > > Could I get your position on this?
Not officially speaking on WebKit's name, but wanted to comment on this. The API seems interesting and sane from the functional POV. I just wanted to ask for the potential mitigations for the additional fingerprinting opportunities it provides for attackers. For example, in the case of the pose it's advised to use rounding,quantization and/or fuzzing. Would that work for lightning estimation or would it cause more harm than benefit (I'm thinking about the different VR sickness). BR _______________________________________________ webkit-dev mailing list webkit-dev@lists.webkit.org https://lists.webkit.org/mailman/listinfo/webkit-dev
