WebAPI/Security/Alarm: Difference between revisions
Jump to navigation
Jump to search
(Created page with "Name of API: Alarm API Reference: https://groups.google.com/d/topic/mozilla.dev.webapi/pkx1uz_pnhQ/discussion Brief purpose of API: Let apps set timers to wake up at a specifie...") |
No edit summary |
||
| Line 1: | Line 1: | ||
Name of API: Alarm API | Name of API: Alarm API | ||
Reference: https://groups.google.com/d/topic/mozilla.dev.webapi/pkx1uz_pnhQ/discussion | Reference:<br> | ||
https://groups.google.com/d/topic/mozilla.dev.webapi/pkx1uz_pnhQ/discussion<br> | |||
http://groups.google.com/group/mozilla.dev.webapps/browse_thread/thread/29f1efb730a9c17/5fd64f1fefe0ddd8 | |||
Brief purpose of API: Let apps set timers to wake up at a specified time | Brief purpose of API: Let apps set timers to wake up at a specified time | ||
Revision as of 12:55, 25 June 2012
Name of API: Alarm API
Reference:
https://groups.google.com/d/topic/mozilla.dev.webapi/pkx1uz_pnhQ/discussion
http://groups.google.com/group/mozilla.dev.webapps/browse_thread/thread/29f1efb730a9c17/5fd64f1fefe0ddd8
Brief purpose of API: Let apps set timers to wake up at a specified time General Use Cases:
- Implement an alarm reminder app by setting an alarm intent for a future time
- Set an alarm to ping a server at a specific time or set interval
Inherent threats: Annoyance
Threat severity: Low
Regular web content (unauthenticated)
Use cases for unauthenticated code: Relaunch the app via an alarm intent at a future time
Authorization model for normal content: None
Authorization model for installed content: Implicit
Potential mitigations: Should be a way to disable alarm for a given app
Trusted (authenticated by publisher)
Same as for installed untrusted app
Certified (vouched for by trusted 3rd party)
Same as for installed untrusted app