Skip to content

Commit

Permalink
Remove the rate limiting section per PING review.
Browse files Browse the repository at this point in the history
We don't have rate limiting mechanism since the posture changes
are triggered by a human interaction (opening/closing the device
for example). Also posture changes are not happening often and
rapidly.

Fixes #154
  • Loading branch information
darktears committed Jul 19, 2024
1 parent 358ee8f commit 70094e4
Showing 1 changed file with 1 addition and 17 deletions.
18 changes: 1 addition & 17 deletions index.html
Original file line number Diff line number Diff line change
Expand Up @@ -613,8 +613,7 @@ <h4 id="identifying-users-across-contexts">
</p>
<p>
This theoretical attack is mitigated by [[[#data-minimization]]],
[[[#user-attention]]], [[[#user-mediated-action]]] and
[[[#rate-limiting-change-notifications]]].
[[[#user-attention]]], [[[#user-mediated-action]]].
</p>
<h4>
Cross-origin iframes
Expand Down Expand Up @@ -687,21 +686,6 @@ <h4 id="user-mediated-action">
user's learned expectations for an outcome of such an action.
</p>
</section>
<section>
<h4 id="rate-limiting-change-notifications">
Rate-limiting change notifications
</h4>
<p>
The API is designed to minimize the rate at which posture state
changes are reported. A change is only reported throught this API
when an implementation-defined threshold is crossed per [=posture
values table=]. Given the small number of states and a wide range
of angles that correlate with the default
"{{DevicePostureType/continuous}}" state, the rate of notifications
is limited. We playfully call this mitigation a physical
human-computer interface rate limiter.
</p>
</section>
</section>
</section>
<section>
Expand Down

0 comments on commit 70094e4

Please sign in to comment.