4 ms·
I think a good idea would be to at least let the user confirm it. For example display a notification: "This website wants to interact with devices in your net
by bpfrh 7y ago
I think a good idea would be to at least let the user confirm it.
For example display a notification:
"This website wants to interact with devices in your network, if your are at home, this includes all of your
smart things, smart phones and other devices".
I mean, we have a windows firewall and sandboxing on every level and then a webrowser suddenly acts as a vpn for every website?
That can't be good security design
- anaphor 7y agoA confirmation might be helpful, yes. I think the challenge is to design a standard for that which won't completely flood people with warnings. I'm sure there are some "enterprise" applications that will load a ton of different resources from different services on an internal network. So would you have to click a confirmation box for every single one? Or would there be a way for administrators to disable it somehow?
- bpfrh 7y agoNo of course not. I would give one blanket permission for a website. Then if possible list the devices which it connected to. Or you alllow it only per device.