Skip to content

Commit

Permalink
Remove the rate limiting section per PING review. (#155)
Browse files Browse the repository at this point in the history
We don't have rate limiting mechanism since the posture changes
are triggered by a human interaction (opening/closing the device
for example). Also posture changes are not happening often and
rapidly.

Fixes #154
  • Loading branch information
darktears authored Jul 22, 2024
1 parent 1c1a2bd commit 751d737
Showing 1 changed file with 1 addition and 17 deletions.
18 changes: 1 addition & 17 deletions index.html
Original file line number Diff line number Diff line change
Expand Up @@ -575,8 +575,7 @@ <h4 id="identifying-users-across-contexts">
</p>
<p>
This theoretical attack is mitigated by [[[#data-minimization]]],
[[[#user-attention]]], [[[#user-mediated-action]]] and
[[[#rate-limiting-change-notifications]]].
[[[#user-attention]]] and [[[#user-mediated-action]]].
</p>
<h4>
Cross-origin iframes
Expand Down Expand Up @@ -649,21 +648,6 @@ <h4 id="user-mediated-action">
user's learned expectations for an outcome of such an action.
</p>
</section>
<section>
<h4 id="rate-limiting-change-notifications">
Rate-limiting change notifications
</h4>
<p>
The API is designed to minimize the rate at which posture state
changes are reported. A change is only reported throught this API
when an implementation-defined threshold is crossed per [=posture
values table=]. Given the small number of states and a wide range
of angles that correlate with the default
"{{DevicePostureType/continuous}}" state, the rate of notifications
is limited. We playfully call this mitigation a physical
human-computer interface rate limiter.
</p>
</section>
</section>
</section>
<section>
Expand Down

0 comments on commit 751d737

Please sign in to comment.