Intent to ship: Gamepad API outside SecureContext

296 views

Skip to first unread message

unread,

Feb 20, 2024, 12:29:40 PM2/20/24

to dev-pl...@mozilla.org

As of Firefox 125 I intend to remove SecureContext restriction from Gamepad API.

This restriction is added as a part of cross-browser coordination to prevent fingerprinting. So far Gecko has been the only implementation that shipped the restriction, and we figured that requiring HTTPS does not fulfill the previous purpose anymore as almost everything is HTTPS now. As this affects web compatibility, we are lifting the restriction in agreement with WebKit.

Other browsers:

- Blink: They never shipped the restriction but only the warning.

- Safari: Same as Blink, and the warning is being removed: https://github.com/WebKit/WebKit/pull/24550